e7f59847ca465a5741e6cfc5f70f64e50791a9209c7cb79b32755b6269083363

General

Target
Fortnite-cheats-main.zip
Size 19.8MB
Sample260625-12rxhsf15p
SHA256 e7f59847ca465a5741e6cfc5f70f64e50791a9209c7cb79b32755b6269083363
MD5 073188ac0731d330a6298af968b17da6
SHA1 7f91a41ed34ffbd288c99a3b3e99b712df108a22
SHA512 51b202c29425fd75837d1af35a6a14fde11ac4d1bccb64a0e9fbc8e364e6672fd345e8d30da194995e4f658639e0f20288284d6030fbaa09da2c37cf7af107db
SSDEEP 393216:FAqy5nkdPcLkoRYkcm93Liyyf7D1fVggV0AkM3puv8rp6RO235dvo97:2qKnqEfRXcm9iyyf7D95Nk0iqp723m7
TLSH
T1A12733A96AC21D175D08D9CB39770BA222AB87753C955A983E03137C37F6460406FAFF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Fortnite-cheats-main.zip
- Size 19.8MB
- SHA256 e7f59847ca465a5741e6cfc5f70f64e50791a9209c7cb79b32755b6269083363
- MD5 073188ac0731d330a6298af968b17da6
- SHA1 7f91a41ed34ffbd288c99a3b3e99b712df108a22
- SHA512 51b202c29425fd75837d1af35a6a14fde11ac4d1bccb64a0e9fbc8e364e6672fd345e8d30da194995e4f658639e0f20288284d6030fbaa09da2c37cf7af107db
- SSDEEP 393216:FAqy5nkdPcLkoRYkcm93Liyyf7D1fVggV0AkM3puv8rp6RO235dvo97:2qKnqEfRXcm9iyyf7D95Nk0iqp723m7
- TLSH
  T1A12733A96AC21D175D08D9CB39770BA222AB87753C955A983E03137C37F6460406FAFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Fortnite-cheats-main/jewcheats.exe
- Size 20.0MB
- SHA256 1b3a0b642772ecd8a24198379a70c98231f633b7105a955b971c4e079aaafc36
- MD5 a2cedb4f3c13d0249b12950632798e74
- SHA1 6cd50f216408e16b53a0e0e6c189bfc5f6640dcd
- SHA512 031c860a1d2c25765364ff9089063adffde12bcc2b9eb3294f6f8729c586af4e4a73c83b10c6130686740f16617cc10f362e79689f7b809f1fbb50d005303501
- SSDEEP 393216:uZqNbiodjs14bMgLc9zGdCoKjJH+rNtZq5XN86A+7HeLHsxtEDwesimRlt9:aq82G4TLcNOCdH+rNtZq593AO+zwt7eg
- TLSH
  T1CC2733459BC218ABECD3913D99B3C65293A2A5B52F6098EF2B4503393FB35D0043F66D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

credential_access defense_evasion discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral3 behavioral4
- Target
  jewcheats.pyc
- Size 52KB
- SHA256 093515235b9295b687ab269a8474b7b64da582329fbda0a3192416b7eeb615ad
- MD5 40d374a598bd8c69e35f6a51c419b9b2
- SHA1 109eda8572dadeb812d125a9f510203eb7809ad7
- SHA512 1d7180c9764b86c7f4ba45df55ad4bd9439b4983f19a302ca84f450b489830b836b034ea35d429f3b892ff0905261a84ede0959033ca30a4f7f04437b363d0f1
- SSDEEP 768:uxe9rTZdthBh+lYqqg1fv3uVV7Rt8DTNk/HgoDJ:uxArTZdnBlqqgNPc7R9HgI
- TLSH
  T1C93329B9D524A13FEDE8F03471EA99C57B219282B1048347F4344C79BEC9329AAE971D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6