337d49bf9aa29faab4f3d15aa9df460c6a50eb906d342fa9327d82aa02ff45b4

General

Target
Fortnite-Cheat.exe
Size 9.1MB
Sample260710-2f6n8ac12j
SHA256 337d49bf9aa29faab4f3d15aa9df460c6a50eb906d342fa9327d82aa02ff45b4
MD5 5c77920289667285dd760b49a382e9a0
SHA1 a5d27bdd344f3fad3de394e384ee8cd73802e6d4
SHA512 cb38665c722f232dedaa77d76cb3fc2a1669b254cc35dfe546b67d30abc6078a27fdb818cc6c3242492b4b5c30454c65ef767a1c2827befe79e959e09b2fb484
SSDEEP 196608:8Kppznf2ftbW897GXPHMe81SF2RPUewe/8ghtKZ2eHsMRRabRgF/DU:hpe1wPsZg2KefLK4eHsMRRabY/w
TLSH
T121A6339DA3A409EAD873593F5D259063D3B1B4210760D8CF1BE0872B7F572EA2C3A365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  Fortnite-Cheat.exe
- Size 9.1MB
- SHA256 337d49bf9aa29faab4f3d15aa9df460c6a50eb906d342fa9327d82aa02ff45b4
- MD5 5c77920289667285dd760b49a382e9a0
- SHA1 a5d27bdd344f3fad3de394e384ee8cd73802e6d4
- SHA512 cb38665c722f232dedaa77d76cb3fc2a1669b254cc35dfe546b67d30abc6078a27fdb818cc6c3242492b4b5c30454c65ef767a1c2827befe79e959e09b2fb484
- SSDEEP 196608:8Kppznf2ftbW897GXPHMe81SF2RPUewe/8ghtKZ2eHsMRRabRgF/DU:hpe1wPsZg2KefLK4eHsMRRabY/w
- TLSH
  T121A6339DA3A409EAD873593F5D259063D3B1B4210760D8CF1BE0872B7F572EA2C3A365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

discovery lateral_movement persistence privilege_escalation spyware stealer
- Grants admin privileges
  Uses net.exe to modify the user's privileges.
- Remote Service Session Hijacking: RDP Hijacking
  Adversaries may hijack a legitimate user's remote desktop session to move laterally within an environment.
  lateral_movement
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Password Policy Discovery
  Attempt to access detailed information about the password policy used within an enterprise network.
  discovery
behavioral1 behavioral2