General
- Target FortniteNVIDIA.exe
- Size 4.8MB
- Sample261102-py9glstwds
- SHA256 18701b1bacf942527cb240b1fb6d20037ea6b3198563aa9793b62642b435d770
- MD5 2679f84242f1cb556f70af1922c51964
- SHA1 a69b5e8564888c824801d4397ccac49e060899dd
- SHA512 ddecb8bb63a2217c974d26b5aa0876b8cb8f64faf9ccb52340c15c25f96f881b13a0ac7b52e19f3f5a1e9a5916f65fd0642b7040d1230f8c925648bae1cc867d
- SSDEEP 98304:quCj7vQ2s290bDB/okfvlPe4qjZbEJp7jXDFGsfDSPGLGd82k38k6kv:qXvoh290bDNo23qjZIfHFJuPOGdZk386
- TLSH T1D936336502CB3EA2F89613F4A9482E1E499232162F436DACF27F535F881D31D9F73598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FortniteNVIDIA.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
FortniteNVIDIA.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target FortniteNVIDIA.exe
- Size 4.8MB
- SHA256 18701b1bacf942527cb240b1fb6d20037ea6b3198563aa9793b62642b435d770
- MD5 2679f84242f1cb556f70af1922c51964
- SHA1 a69b5e8564888c824801d4397ccac49e060899dd
- SHA512 ddecb8bb63a2217c974d26b5aa0876b8cb8f64faf9ccb52340c15c25f96f881b13a0ac7b52e19f3f5a1e9a5916f65fd0642b7040d1230f8c925648bae1cc867d
- SSDEEP 98304:quCj7vQ2s290bDB/okfvlPe4qjZbEJp7jXDFGsfDSPGLGd82k38k6kv:qXvoh290bDNo23qjZIfHFJuPOGdZk386
- TLSH T1D936336502CB3EA2F89613F4A9482E1E499232162F436DACF27F535F881D31D9F73598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled