General
- Target FortniteCheckerv1.exe
- Size 3.7MB
- Sample261014-lp8l6sa15x
- SHA256 810775c20b109dd2e8106d8dc86c8bd44be89191b1d176f318de0536f2aefa31
- MD5 e8fb397fd7ffde89bd8e9cb4d9d62501
- SHA1 a32c9f976449b62591f302cf3d5badaefbde9c94
- SHA512 1cc56c668a669b627a33203634b04dbbdae1d91135fff6a2df95ad58b410c1807a83d21468daab9c389d4cc878bb3614a78e2ab565f42a95ba26b6eb46541207
- SSDEEP 49152:4ypFsHuBViNm4lReEIvq6vXhgWVWvAdldddkd1Sd8d7Ydud3dXpUCdfdWdo6l5nG:BT2WlJyvNzsjq
- TLSH T117060893199B0CE6DDD267B4B5CB2239A734FD31CE581A3F9A48C5246C532C4BE2EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FortniteCheckerv1.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
FortniteCheckerv1.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target FortniteCheckerv1.exe
- Size 3.7MB
- SHA256 810775c20b109dd2e8106d8dc86c8bd44be89191b1d176f318de0536f2aefa31
- MD5 e8fb397fd7ffde89bd8e9cb4d9d62501
- SHA1 a32c9f976449b62591f302cf3d5badaefbde9c94
- SHA512 1cc56c668a669b627a33203634b04dbbdae1d91135fff6a2df95ad58b410c1807a83d21468daab9c389d4cc878bb3614a78e2ab565f42a95ba26b6eb46541207
- SSDEEP 49152:4ypFsHuBViNm4lReEIvq6vXhgWVWvAdldddkd1Sd8d7Ydud3dXpUCdfdWdo6l5nG:BT2WlJyvNzsjq
- TLSH T117060893199B0CE6DDD267B4B5CB2239A734FD31CE581A3F9A48C5246C532C4BE2EB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Masquerading
1Match Legitimate Name or Location
1Modify Registry
1