General
- Target Fortnite-Selium-1.1.5.zip
- Size 2.8MB
- Sample260718-19kheaes6n
- SHA256 085374f62b7c4c5346a5b5805f9e720992415ebc230399724f733def8fc94470
- MD5 7c5e1677d387c11ceb1c1ebca7ce3005
- SHA1 cf7379f302520b464bb4f9f8c03bd1ef7d1f53a1
- SHA512 792acbc20aaf65d565ade2dbcfc9cbc5277e27fcea308fd26afc02fead4182a19bd66a96bff5d605dea00ce275c71739763809c53dfe087d900ea5abe19fa3af
- SSDEEP 49152:6BWXVMXoVkrW55tE+qWJulB48C9osa7VuNXXN3bUZmacDt1U0iLHXNPEI0yiYveV:TVMXSVE+qEC8oEXdUZmaqtK0iLHJ3iYw
- TLSH T1B6D533F5E8CD17FAF10195E3AE5A6264617D14EE3B0E2190B096FA3E261237CE13D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BmV78Pi.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
BmV78Pi.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
README.md
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
README.md
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
driver.sys
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
map.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
map.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target BmV78Pi.exe
- Size 3.3MB
- SHA256 d5d9c6f40088e135a8b7dc5dad6479c28eb002a5043981d87e7a00d68dabc6de
- MD5 1aafaa7a40a1336240ecc1a533fb346c
- SHA1 f1e4615b04df2a5d3f2ac190d79a20d8ef743514
- SHA512 18ddd516e1f35f6be7b3264b05e5ef66ae971a09e8875255013d1543b6d1733f8e88f171ed316a9dcbc12fafb5e9a47716fff1f1b5a06fa59a78a4d1555b16b3
- SSDEEP 49152:FTJKj1DpuLBmdltEEGuXyhB48cjiWajVkRlXT3dUZkQ81RR0cgdV1F2Onz9CmLH:lJKfuGEEGYCCiWlxUZkQaRScgdV/rH
- TLSH T180F50253F26602FCC127A038DA91E307F7313C442B15A7CBB3D56AA41F672F05ABA691
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target README.md
- Size 964B
- SHA256 50537662257dd0d714201f943071e219dc9fc68cc5eafd233c6df2f4dfd97eb2
- MD5 38bd699e1f1af7cb2be99f815123ebab
- SHA1 dc43761bb72d4072553431a9ee62282aefd6ef02
- SHA512 ed1de5f5bdeec9b3572e42feeef24186c5f65cbe70832629dd34b9a108391646563c6bbf56ef62fd20dc1944a71f2283aeb6114fa5fa0de781c8a1ab2796f120
- TLSH T10411504B136B963301F1018B080D23FE97405828503D20293870A41C826CAF9D7F8FCE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target driver.sys
- Size 8KB
- SHA256 fd4a1eb46a25b5e687957300aab62074cf36a7905bbbd0cb0809c150d5f5facc
- MD5 64459649af479f7d4ab915e8d2dc177d
- SHA1 e723c78eff93834f8ec6ea3fefaa4996d3b7fe72
- SHA512 c0d076a765399394c7a9e2e3c1ec9a161469ad8942688d68ca1802f81b3ffe5040c7f78f9581ce620cbd24460acdb6dce67872f3ec3c18542aaf3ddb85d7bb83
- SSDEEP 96:UU8fjUHmSWDb22zvqLcSHWj7nVQOJT0VzvDBhhJ:tWP22zvqYYcTVQ7zbzh
- TLSH T19102C8B061179DC4E25DE17ECA9746A9B6B5F01003924FEF8965CA6E1F12FC12C3BA80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target map.exe
- Size 138KB
- SHA256 57832f7a25c5cd0dfca09c54d0019e4f19a0d27a949a92dc68baf35b72be8211
- MD5 365fc713b2097470bd269602b5d54eb2
- SHA1 4e237fb146ed252246ad81231294f877edbc35c7
- SHA512 5033693df40f39a568967b26977603c353d59e538d43da430838875d5955181cc5533a3ae8de4aaf23b8841046e72f970f539879f44c17a633b72df08ead29d3
- SSDEEP 3072:ejVYisyVqzOSDMbfVP+qmJTQSaMm5/6Ygnzg+zOG:ebsyVqzOswfUWlBgns+q
- TLSH T112D35B2BE659207ED2A6D9BDCA524912FBB27C850751B7CF136049B60F627D06F3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10