91ed1383e8576d84f0a93ed1b3fb50463af2b1473ee023bb1f250a9bc9f695cd

Sharing

Copy URL Twitter E-mail

General

Target
Fortnite Full.rar
Size 23.8MB
Sample260908-wt131awsgs
SHA256 91ed1383e8576d84f0a93ed1b3fb50463af2b1473ee023bb1f250a9bc9f695cd
MD5 a642e7dcd98924e089a97c8ea9a823ff
SHA1 dec1761440af2268924d012ce07607b1d76f3365
SHA512 393da7e6b5bc4a5668ac56f613b310c4ee55f7cf4cfc9d09340adb73e6ce2fbe6189cbd4d698517c5b52500539728388d4a1daa572d8c03879aa0a8a56203262
SSDEEP 393216:M+Y91AbCxAdNUQCPFcXMKslmHCCPENqE4tMKsl0QfbH+DCHFmdB322OV48Y1vLSr:M+Y92bCxA3CPFSs0CCPENt4TsK0TcdBw
TLSH
T1654733DD22096C026F4A121AF5922DD024A5F0F2D1A6EFE97177C56CB8C75FECBA9103
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  Fortnite Full.rar
- Size 23.8MB
- SHA256 91ed1383e8576d84f0a93ed1b3fb50463af2b1473ee023bb1f250a9bc9f695cd
- MD5 a642e7dcd98924e089a97c8ea9a823ff
- SHA1 dec1761440af2268924d012ce07607b1d76f3365
- SHA512 393da7e6b5bc4a5668ac56f613b310c4ee55f7cf4cfc9d09340adb73e6ce2fbe6189cbd4d698517c5b52500539728388d4a1daa572d8c03879aa0a8a56203262
- SSDEEP 393216:M+Y91AbCxAdNUQCPFcXMKslmHCCPENqE4tMKsl0QfbH+DCHFmdB322OV48Y1vLSr:M+Y92bCxA3CPFSs0CCPENt4TsK0TcdBw
- TLSH
  T1654733DD22096C026F4A121AF5922DD024A5F0F2D1A6EFE97177C56CB8C75FECBA9103
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Fortnite Full/Spoofing/protect.cpp
- Size 96KB
- SHA256 7a6e39879f80413a946f459658a04fcc86e2ef18a2a52f30960ec912c9b61edf
- MD5 da20f0d476f65936ce0ddd992d0a3de0
- SHA1 466562eaef2abc990bcfaca5f86bfbada25b2a37
- SHA512 eded64e2723ece92d0336655dba85ae03c095b4822997aea29b995cd1fcc5f3fe6c3457c3de07dc0d2b95d2f0b45c653e639c0f4d35c4b20738edce378de8d3f
- SSDEEP 1536:jbvwrXL3OI7Oa5BxDczNmcnhPRm9fN/ksfdXFRkCREioCBe8:jbEXiI79BxDcekh8
- TLSH
  T1B0A309C7784F901A6F7272619231190BDCADD422137E9779F8CCC194FB694298278BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  Fortnite Full/loading/intel_driver.hpp
- Size 5KB
- SHA256 669f260059cc341a8f1e41ca38ef395b20683796cfe89447bb01995b3ad1839a
- MD5 1ccd80ee21d6e248ba5416d1338ae90d
- SHA1 7f633561ada67ac9f484935fa64e1e22c9a91ae6
- SHA512 79e8afae16cca958d2a08bb8fdae40cbbc9b6e781aa4b85980f5687cb1535e41fa36110ea746faf9be09127f470b9478b3469b749a72820d9522a492f3eb3288
- SSDEEP 96:Lgur1AYmLIfBTtjRFj2LchT7bifmqLMVQxh4udpVaPEb1lF8nYc6:Lge1AYmL4T4IhThFVQX4cpuEpv82
- TLSH
  T116C15292E33CE64786730CF16E0B14A6763F022264990DF1758D73607DB86CED4A7EA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DCompiler_43.dll
- Size 2.4MB
- SHA256 ffedb064adc25328b24dcf145b04045a867a5574c931516d7845babf2a08937f
- MD5 d010ab113ed06bf6b42c7746ef395e21
- SHA1 5d6b1763f38ffe6d70146e74e9abeae15e3fc35b
- SHA512 0ca4656d0ea2af368b0f667dcfbbc819f8f1209cebba3e5a2bceb9b235e5443eb0452f0f0c3970b419fe6199d4d7cb7390a1f9cd46b689954f8e58ba9d0c2b9e
- SSDEEP 49152:wf59zPxKcvHzDB6t3+C0/aJfyLg7Ie4Xy+5j4m2CTv:92642o7lftT
- TLSH
  T13EC56C46B6A080F9C6AB81748A975703FBB0781403245BDB5160E6652FB7FF26E3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX10d_43.dll
- Size 558KB
- SHA256 d3671c4ea33f3a5eb214239b96e7e13d850ff17c7b88e9ce42ca98dd2cc81342
- MD5 a8724246a6a8ce5b06919b0d245886c1
- SHA1 f1a55d45e3693d8c40b5a7bd59671cc9b2edfbf8
- SHA512 f1211554b344d991ca8aa641f1ed11e00baba9775b21e93515f6471f7f2ad4fffcec1f9ab920b348cb543a285d184f17d1796ea77c9d012bbf9ca3cb3df53c48
- SSDEEP 6144:zrONe6geY8qq+ne6S6tsZsuvGnBfSmSQB6GtNWuzxDyKKqWru48ZEz2GPicFY:zUeU+ne6S6tsZNenBLSQB6SNWvqWb2GC
- TLSH
  T17DC46B1172B8E7E6E139513DB09AB64BF97130180B2082C766F44868DFB6BD45EFE721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX11d_43.dll
- Size 303KB
- SHA256 8b3bd19047ae6fd66cbb57933e622a3541545ad99fa609ea648d630816132f01
- MD5 c2e140161a8bd80effa4289d4b56d4a5
- SHA1 142e9e05130299428a2b7a34b6d4939ee43ab03a
- SHA512 103161958a070b643d781c7720f09f93d4d25366ec3b50d8a768c7e5c3b67ec5ef1808724b7620519f411f13f482287e8a8db5eeae1bd2bce764595b2f45dc9b
- SSDEEP 6144:p5H9B3WaqxYp9ZxQJ5H2FxPDiXHUu7Hzg5:pZqyLxQCcBHz8
- TLSH
  T135647B113798E8E7D0795039A1ABF213F67279442B6892C77BD00E8D5F76BD01B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x64/D3DX9d_43.dll
- Size 2.6MB
- SHA256 beb6cc5b8995713dc9de7442569d0f00b30462d6c4c2a05af591550c624b5caf
- MD5 6f1514f04c158022055e691c9b8181cf
- SHA1 3e9d1718446558a8d786a857e214ba5973951b60
- SHA512 20e8d04bddb5f56d7772061d7d83abc7b10b1944ded29465b67bb95f52ab1584f9f50d3173a86ff2d0682a42896d6e012fcb182fc997787da65174c5e0b732f7
- SSDEEP 49152:FL5W79bCsT6TA69r9R6OGykEzWCFC6mkAWb2zCeeYBKyCvUM7u:lSCONiS
- TLSH
  T139C56A2272F4D1E4D7268039B59BB307FAB4305913188BC353E04E9A5FE6BD429FA365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DCompiler_43.dll
- Size 2.0MB
- SHA256 aaca0bac2e1e94966f4546b6234333f9cdc1a4599024e30cd20aef4c1fd1b4f1
- MD5 0b3dd892007fb366d1f52f2247c046f5
- SHA1 9c09abcf5034d839ceb881437a5bbc7fee30ed96
- SHA512 284c3cfe4973d9ec5919e1bee1a739f3dad2b367d761aeef574b7d8e47f5bc775d5d6255ae087b4311a84a6e0fc80b57e5f308af5c635080b31f295fc0679dad
- SSDEEP 49152:zpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akl:33P9HP6Zpy9KyhMI50Du8LljslNsyHiQ
- TLSH
  T192A59E11E705D0B2CCCB00B16A5DB7A6647C9F30432096C7B2947EA95D72AF35F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DX10d_43.dll
- Size 505KB
- SHA256 05175aae7173650e04ec7ebb9fab69d3eea6da5c793c84c874b4795ef75e04fa
- MD5 527903b9eb6ed4d58bc70537e73575f4
- SHA1 f963038815644f3112976a4c2388f3ffc51136a0
- SHA512 217550fa33cbb7a5141da4331e9bbd906842037c81299923243e1f69bfaadd8d56b98b8a6ead9a43384b44abcdd40b4b05e9501e9166c2d6bcb234a077c343ae
- SSDEEP 12288:+TuX2VvQcKfKGass0wIvZ8vr7vZv9X4RSdmdZfM5Gb:LX2VKfEss0wIvZ8vr7vZv2w4E5K
- TLSH
  T18EB49C91D5405132CCEBE274610E71A236AE8F329360B6C71F5C5AEAAE787C417B87C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3DX11d_43.dll
- Size 264KB
- SHA256 852117eee0e31842d16c0444de323c9e5d36634bd8f5b6f62f6dff3dc1ef9fc0
- MD5 19f6f2e9904b5521b7eca2d8fbc6ecdb
- SHA1 5a2567b84d0910fc070adb1c92ee8ef45332a379
- SHA512 2d299eab7b86b9e6ff6db454a3c13e7f2e561ae33d03a15ef1b6347d2e7dee4b4d93a94ed976f7d32e0cc62550e0606c4e8bc0aeb731635e7f6891705c35e1a0
- SSDEEP 6144:iR1Vjp1Q4nnY7Qm/PV/9j/6l/OQ4yIEGn/TsowXMwj+f5MPiMt:iRjrQ4nnY7Qm/PV/9j/6l/tFVGnBwXMW
- TLSH
  T1F0446CA5AA801035ECF6D2B4254F633152EEDF3007B1E3C71748AADAADF56C15A34B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/debug/bin/x86/D3dx9d_43.dll
- Size 2.2MB
- SHA256 fe24577450c883e1d51db8d92ad4eaca289008301113d89effeff4e34342b142
- MD5 9acdcceb89939295ac2cba6bcdc5e3b0
- SHA1 1830e3f4d55f2e3381f5aa066ea5f7ed56e302e2
- SHA512 3c443de09664e6f83047507a21cc388e53f9990d2e822193818dc27fb3b84268121ccc74e01f2abda4936e4b6b75768efe160884f0687a839c2134f8503173b6
- SSDEEP 49152:Fizfxd26tPQ2xgc/lkWz20OLe9o1xCRAHjQ:kO6tPQQgcNkWzJOLe9o1xCWHjQ
- TLSH
  T1F4A5AE62C5091078EDF79070220C32B222BD57316361A3CF62991ED9EBF5BD5AE38797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/D3DCompiler_43.dll
- Size 2.4MB
- SHA256 ffedb064adc25328b24dcf145b04045a867a5574c931516d7845babf2a08937f
- MD5 d010ab113ed06bf6b42c7746ef395e21
- SHA1 5d6b1763f38ffe6d70146e74e9abeae15e3fc35b
- SHA512 0ca4656d0ea2af368b0f667dcfbbc819f8f1209cebba3e5a2bceb9b235e5443eb0452f0f0c3970b419fe6199d4d7cb7390a1f9cd46b689954f8e58ba9d0c2b9e
- SSDEEP 49152:wf59zPxKcvHzDB6t3+C0/aJfyLg7Ie4Xy+5j4m2CTv:92642o7lftT
- TLSH
  T13EC56C46B6A080F9C6AB81748A975703FBB0781403245BDB5160E6652FB7FF26E3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/D3DX9_43.dll
- Size 2.3MB
- SHA256 36b84dfa0ef9d3ff3549a7ad54d2a8032bd22c879219ee1a959137c4ef8786c4
- MD5 460d2b03615d8c0697721ce26aee1e60
- SHA1 e2dbd56d24cd783fb3c4bc2b527665623fb6435c
- SHA512 7d2a6c0593269aa74af6e53ffaede1e805c795410f97c5eeef6f4963e3e5785d02db81630758747dfa6bad60082ec1e118869b27f3f6995e11d9f592956d5b2f
- SSDEEP 49152:2bCJsk4VlPXA+15Om5wxw9Qsi55K+31BhZ64nI:1IIBnI
- TLSH
  T101B5486172F4C1E4E3269039B597B20BFAB1304907188BC793E04D9A5FE6BD86CFA355
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/d3dx10_43.dll
- Size 502KB
- SHA256 b5f2e4d842c758fae91323888ace39328c47d9546231757f73831e2369ae58ed
- MD5 190649d410964753a54a306caeb33cb8
- SHA1 b45752e0558a9b0b70a9b490e8a7148b807a4f42
- SHA512 8321a42608947bdca156b48c019b999d01aaea6a558026493b42ca54c18b1f3eb7d0d343c998af16fd27dea63fff662c2f645962e261aec0fa04d8fcb72b92fe
- SSDEEP 6144:dIHyAfFvQet8lzb3f3+UHWIVPfkKS7GXzeARN85BwC5uhFcuiZyoO2uwpapnlJRX:aNFoet8lzbv17VPfkKS78zBN8LgIappX
- TLSH
  T1A0B4484132B8D6E6F13D653CB0AAF60BFA3135180B2046CB56B49069EF66BC44EFE715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x64/d3dx11_43.dll
- Size 273KB
- SHA256 25814402ce1d74f198958aa38661242189b4e5d640177087d0ba0ecf65d19a44
- MD5 015743813e8d70a91cce6319fd2ec94a
- SHA1 14c224c566a28168be62de535445d527a1156f01
- SHA512 163971668c8d34baccd6cd526b589b91792a2a6437ceebfb9080e2c98d0e33a59c9f084f98ccc2f117b872836407595b6166b09f3830b4875036db95ec2aef5f
- SSDEEP 3072:FCWVWFOaVgP7BzvjYlTc91N6Vkg4eK6DvDBcMqpcJbMYBu1+Iz54+vJds:/Ww4gPdz7YlTc91i1DLopYMvIIhs
- TLSH
  T1C0546B5237899CDBE4B9A83CD0EBA203E3F1F5950B60D6CB0260455DAE7B7D09E7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Fortnite Full/packages/Microsoft.DXSDK.D3DX.9.29.952.8/build/native/release/bin/x86/D3DCompiler_43.dll
- Size 2.0MB
- SHA256 aaca0bac2e1e94966f4546b6234333f9cdc1a4599024e30cd20aef4c1fd1b4f1
- MD5 0b3dd892007fb366d1f52f2247c046f5
- SHA1 9c09abcf5034d839ceb881437a5bbc7fee30ed96
- SHA512 284c3cfe4973d9ec5919e1bee1a739f3dad2b367d761aeef574b7d8e47f5bc775d5d6255ae087b4311a84a6e0fc80b57e5f308af5c635080b31f295fc0679dad
- SSDEEP 49152:zpX9JVeE9HP6Zpy9KyhMI50Du8LljslNsHSHFUq9OiapbbO5Akl:33P9HP6Zpy9KyhMI50Du8LljslNsyHiQ
- TLSH
  T192A59E11E705D0B2CCCB00B16A5DB7A6647C9F30432096C7B2947EA95D72AF35F3AB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32