Analysis
- user interaction
yes - max time kernel
22s - max time network
24s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/04/2026, 04:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VerdictFortnitePrivate.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
VerdictFortnitePrivate.exe
Resource
win11-20260130-en
5 signatures
150 seconds
General
- Target VerdictFortnitePrivate.exe
- Size 4.1MB
- Sample260416-e4rhwaax4z
- SHA256 dbdbfe60e3141e1424da2a48471869d3cea6ad0a526b3dec76b9a9206400448d
- MD5 5513952305fb1a147c93e04e530af59f
- SHA1 1d18a8e3fdcbf73038c35a7819bfdd1a67b12c1f
- SHA512 9d5386d9ccbb29e13cc52eece33bc687504eda3bb3c2e5a753068414334d390a7a3aef037b7e41bf0462c82ed63ad640261144fd511a292d9e3be8e87148bd3e
- SSDEEP 49152:pylKq6cxy4zqZDgGn4G8RG8fOMIb67SJtrBmO7iRlIPWOghgNvR8h1SFjFK8uT+y:9Nn6mJ3t7KIWOgWO0Ft
- TLSH T11816AF07F3E342D4E7BBD53856766327F972B4514B35938FA7802A464B926E0CCBA780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 6 IoCs
pid Process 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe - Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe 4196 VerdictFortnitePrivate.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4196 VerdictFortnitePrivate.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4196 VerdictFortnitePrivate.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\VerdictFortnitePrivate.exe"C:\Users\Admin\AppData\Local\Temp\VerdictFortnitePrivate.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4196