Analysis
-
max time kernel
46s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
30-06-2024 22:42
Behavioral task
behavioral1
Sample
Cheats Fortnite.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Cheats Fortnite.exe
Resource
win10v2004-20240508-en
General
-
Target
Cheats Fortnite.exe
-
Size
23.7MB
-
MD5
378c4ed72845aba628706fa0f40a66a6
-
SHA1
26229a255805494f2009447ca425f8000224f8b1
-
SHA256
1e96fef78ab6d102d8e670419b2aa06afc1a84a2e3f5bd276e4373a9f6433a85
-
SHA512
5b0f22d92fd4464f3d8bded5e792ac401c68a5a296f98915854a692a041c0364825478dda2a02a53958aba075b1cb2fff2cb967b7487203789426d0063aed9d2
-
SSDEEP
393216:xqPnLFXlrnu7n0jcEQDw20DOETgsvcGfVgT29sDpMpDs4IspJdGwXEBus:YPLFXN8icEQDwqED0wNRGwXY
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
Cheats Fortnite.exepid process 1524 Cheats Fortnite.exe -
Processes:
resource yara_rule C:\Users\Admin\AppData\Local\Temp\_MEI22282\python310.dll upx -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
Cheats Fortnite.exedescription pid process target process PID 2228 wrote to memory of 1524 2228 Cheats Fortnite.exe Cheats Fortnite.exe PID 2228 wrote to memory of 1524 2228 Cheats Fortnite.exe Cheats Fortnite.exe PID 2228 wrote to memory of 1524 2228 Cheats Fortnite.exe Cheats Fortnite.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Cheats Fortnite.exe"C:\Users\Admin\AppData\Local\Temp\Cheats Fortnite.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Cheats Fortnite.exe"C:\Users\Admin\AppData\Local\Temp\Cheats Fortnite.exe"2⤵
- Loads dropped DLL
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\_MEI22282\python310.dllFilesize
1.4MB
MD569d4f13fbaeee9b551c2d9a4a94d4458
SHA169540d8dfc0ee299a7ff6585018c7db0662aa629
SHA256801317463bd116e603878c7c106093ba7db2bece11e691793e93065223fc7046
SHA5128e632f141daf44bc470f8ee677c6f0fdcbcacbfce1472d928576bf7b9f91d6b76639d18e386d5e1c97e538a8fe19dd2d22ea47ae1acf138a0925e3c6dd156378
-
C:\Users\Admin\AppData\Local\Temp\_MEI22282\setuptools-65.5.0.dist-info\INSTALLERFilesize
4B
MD5365c9bfeb7d89244f2ce01c1de44cb85
SHA1d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA256ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
SHA512d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
-
memory/1524-140-0x000007FEF6040000-0x000007FEF64AE000-memory.dmpFilesize
4.4MB