Extracted

• • Target
    FortniteExternal-main.zip
  • Size 284KB
  • SHA256 58e6170cc949180f6f86fba1a1384d9aac915ea7c3c282893c577cafd3541297
  • MD5 6bf86cb42cd5154afce3e1db56964369
  • SHA1 0c4e04dfbc5ab6f87984134bd7266daf946a083a
  • SHA512 ea00f121d94dbeb50c4a5d20c4718a54eca2f1ab962360bed1430fb662828f2310f066627f1577ea1701e8ea99bccd46dcf4d167025d02ad3fadcc122a75b34e
  • SSDEEP 6144:9bs68FnNynbfZoOzbEWGSHVXWC8lCk1SHM70vUw:9bs6anNi3bEWGSHdWCvFM70vUw
  • TLSH
    T1635423186B734821F139C8B613C194D38FDCB055098058EAFA28AEE2E5DF7E9F1B556C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  adwarepersistenceransomwarespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2
• • Target
    FortniteExternal-main/Loader.exe
  • Size 490KB
  • SHA256 f5f14b9073f86da926a8ed319b3289b893442414d1511e45177f6915fb4e5478
  • MD5 9c9245810bad661af3d6efec543d34fd
  • SHA1 93e4f301156d120a87fe2c4be3aaa28b9dfd1a8d
  • SHA512 90d9593595511e722b733a13c53d2e69a1adc9c79b3349350deead2c1cdfed615921fb503597950070e9055f6df74bb64ccd94a60d7716822aa632699c70b767
  • SSDEEP 6144:3PkcFUUUQHs5TlOhDuy4VjmSO6/tU4j06xeJyCjvhsXZ4m05d0qCsfBLuWWCV/rr:3McWUUysz/NhKjJPhM4/5bV/rvgE3
  • TLSH
    T11DB4CF09724740F1E27A9AF20648F93C873AD928CFF669575F714A3D97E214C0B7862E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoverylummaspywarestealertrojan

  • Family: Lumma Stealer, LummaC

    Lumma or LummaC is an infostealer written in C++ first seen in August 2022.

    stealerlumma
  behavioral3behavioral4