Overview
overview
8Static
static
3Paster/Dri...ap.bat
windows10-2004-x64
1Paster/Dri...ap.bat
windows11-ltsc_2024-x64
8Paster/Dri...er.exe
windows10-2004-x64
1Paster/Dri...er.exe
windows11-ltsc_2024-x64
8Paster/Dri...te.sys
windows10-2004-x64
1Paster/For...ts.vbs
windows10-2004-x64
1Paster/For...ts.vbs
windows11-ltsc_2024-x64
1Paster/For...ed.exe
windows10-2004-x64
1Paster/For...ed.exe
windows11-ltsc_2024-x64
8General
- Target fortnite-imgui-external-main.zip
- Size 594KB
- Sample260708-phb66sgv7j
- SHA256 5df0edba2f20d37cc7c2d23651dcfaf3b7e7c42f6ffc8d16f1bef7cf64967eb0
- MD5 f1bf92d74933eb963fba7f0693c30c00
- SHA1 25d736d7ec9b507cf0bd67e7779638d84be4880e
- SHA512 08ff1b4dbd7ce148ca6397c6ec67a1304cc8d7e54d92784e25be11f7aa5c2af7d10563eeb7b165c6fb012245e7321b0230c43eeaf098bc7fa6dc9d809dcc80fa
- SSDEEP 12288:gsqjRA3zr9S8VzejdDzezq9WW9zNkDBwEvSXUi8Tyv07V6XWtZkoOirN:gsqjR6NtVzeAzq9DtNweEqXUi8r62Zk8
- TLSH T13FD423BF8391F3855211DCC4A5CA72030B2AA442F682795EB695C729E1BDFAE2D0174F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Paster/Driver Build/Map.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Paster/Driver Build/Map.bat
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
Paster/Driver Build/kdmapper.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Paster/Driver Build/kdmapper.exe
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
Paster/Driver Build/youpaste.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Paster/Fortnite Source/Imgui/imgui_widgets.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
Paster/Fortnite Source/Imgui/imgui_widgets.vbs
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral8
Sample
Paster/Fortnite Source/x64/Release/Compiled.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
Paster/Fortnite Source/x64/Release/Compiled.exe
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target Paster/Driver Build/Map.bat
- Size 55B
- SHA256 3b3a078d58c3b3a3edb000a719c4d2d6a50ccba06694c081cc4384b5c011533a
- MD5 886b693d8e9cbc617f6c106b5cd69800
- SHA1 d0fad5b9cc42378814f5693eae6dcdb75e7549ad
- SHA512 59c2d40dfc5bbb4869b85f70fdc0ff1a9843b39660aba99061a64ca53edf3e3799b7de930fa203781a272a88df43ba8c56b57c8931039e5eb6ad84c04e061ff4
- TLSH T15F9002955A4F9240588A614E04C9D2C1DD6611554434494B55958118A825715670292D
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Paster/Driver Build/kdmapper.exe
- Size 108KB
- SHA256 f2c4cf5a4c23894c777d140252d762971423f7aaa3cad8f1944a0f135a99189d
- MD5 62dfa24f81c519741b67cbe6f8b7a190
- SHA1 7d693dde508369fbfc5a1a3b1af3db1fc2370fd2
- SHA512 9e083bb99c19e6af3e0f721fb5f3ce70cb87c402498abea30f71f58af2ae1b5cac568cdc5f7e66e36ca2c09a64484767695b5e6ef672ea24b699f1b08ba004af
- SSDEEP 3072:JzKzHc+mJNz80ECraVGA90uDmJTQSaMm5/6SUxy:J+zHOz8hC9WlP5
- TLSH T1FCB35C97675910FCE2A7E2BC96A70A42DBF1B8550710A7CF23B0852A0F53BD07E3E651
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Paster/Driver Build/youpaste.sys
- Size 8KB
- SHA256 fa6aea0c01c664f19ff1cef4e5a5286592289ba1da34b1ddcc5922b20034390c
- MD5 c2c966a1ade4cca1ffc4723f3b3b7a31
- SHA1 fb5a37e67f946ac35067c38bd21f605b36d67fff
- SHA512 ba969abaf46cd692b8edcd07a13d64fe428f4225a749846c738bcd3a242a9f09c666c726b89bf19070e6bd09c04a20ea496395ce2ea6ba2e339d9725419a5de9
- SSDEEP 96:bSe8NxV143+gqCcghunTkqG9JA2t42x+NYuXNjDVVd:epP0+zCzhunQ/JV4PuuXd
- TLSH T15BF1FAB173AA4AE5F2AF557C9B95D439A3B87100271245EF5000CD7E4EE3FD06833A44
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Paster/Fortnite Source/Imgui/imgui_widgets.cpp
- Size 299KB
- SHA256 393f8decb4fca8deaa13d914cda669a4b9baa7366a6389d2c467da4e32a9e7fc
- MD5 1845a44edb4567759067b872b745ccbb
- SHA1 162e67df7859e5f1fae3bac993bb7e6b03872d63
- SHA512 5eef8186625bec614ae2bb307e5ee7b02d4dc456b6d5a9bd46443fac99d2dc3ca61e90bee6a3caffb183591fd6e46389121b94e65e9d6e987692412d2d81d8e6
- SSDEEP 6144:A1YSk3XDtBZqkGvki6MiZMhS3WbKmhOhXn:A1YSk3ztBZqk8qMiZMhS3iKmhOhXn
- TLSH T15D54C4811D2326268933E0284FC7A259EB2959773B94C9A07B1D535C7FC4436C2BDBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Paster/Fortnite Source/x64/Release/Compiled.exe
- Size 279KB
- SHA256 9532e4cae523912dee30d72df24d0b2d3a9d9f430e005338ad4bcde5ca890dd2
- MD5 29856b7128538bae0ac35cb7e39e9868
- SHA1 4cd1879579c9d105b0538efd98a31ae3aa7d988f
- SHA512 fd955d71756b69500dc524e7ad4cdd871d57f551f9775e0d9b3bb973a755d39419e9821b033a4dc22bde67a4c3a84afd921e7a96a57261b099f13dcff88d2fc2
- SSDEEP 6144:MBKmqqvhcYGocrdJ7biv21M68Acb0X6pz6waonds:oKm/G1T/xDEWon
- TLSH T10E547C46B1A85CF9E46B9078A09AF30BF6353814472486CB33E444557FF27E0AAFB752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.