General
- Target fortnite external unsafe.exe
- Size 1.4MB
- Sample261023-rexptasy4n
- SHA256 5b6bd57c7db31237a60f14db705381594d5adb254a08a8f50c85aaeb870e07a4
- MD5 9ec3a87b7c509cdd8c49707df6f18ffc
- SHA1 4c56c83059c8fffd4c2a50d1413f3f9d18b9453b
- SHA512 09bb0d001006336b0d00bd8b0328b68d696ba2a10659f964705086a80bc7aba7abe4bb316482b6bf6144cbecd2ed669a243e24ac8f50512285a958fcd9f31e80
- SSDEEP 24576:Cfj5bdof5NBOZBuUUSBaYQj0r95saT1AZzRh6R1giW3npT9:C474Z4dAaYKgDfTYh6tQn
- TLSH T12365E007F3E115B9D06266388952E317E6303C552B24DACF33D92A5C1FA3BE06E76789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fortnite external unsafe.exe
Resource
win10ltsc2021-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
fortnite external unsafe.exe
Resource
win11-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target fortnite external unsafe.exe
- Size 1.4MB
- SHA256 5b6bd57c7db31237a60f14db705381594d5adb254a08a8f50c85aaeb870e07a4
- MD5 9ec3a87b7c509cdd8c49707df6f18ffc
- SHA1 4c56c83059c8fffd4c2a50d1413f3f9d18b9453b
- SHA512 09bb0d001006336b0d00bd8b0328b68d696ba2a10659f964705086a80bc7aba7abe4bb316482b6bf6144cbecd2ed669a243e24ac8f50512285a958fcd9f31e80
- SSDEEP 24576:Cfj5bdof5NBOZBuUUSBaYQj0r95saT1AZzRh6R1giW3npT9:C474Z4dAaYKgDfTYh6tQn
- TLSH T12365E007F3E115B9D06266388952E317E6303C552B24DACF33D92A5C1FA3BE06E76789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.