Analysis

  • max time kernel
    68s
  • max time network
    80s
  • platform
    windows10-1703_x64
  • resource
    win10-20240221-en
  • resource tags

    arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
  • submitted
    22-02-2024 02:24

General

  • Target

    fortnite-hack-hxd.html

  • Size

    11KB

  • MD5

    bf6d7700edb254a5489a8b37241fae2d

  • SHA1

    25c5c5741dc992304883ccd10f7b33cebf2bf4ed

  • SHA256

    44a244845f1538d9719091df090f9dd36ee266c28d1b7de9a7420e5aaef3f5d9

  • SHA512

    b90caf6e1e99e170c329225215ec690cd2ead4ae076103f51e861f71abd59eb0132cba25df1fbe61e75c8cfcd34123b543a1a949ae150000f8e2e70b23b1c229

  • SSDEEP

    192:zyHGq+EY1f+9TBlaVJdhQ8Kh13Wg1F3q21Patw9X0F6YEM5czKS19:wR+pf+nkXnQlTX1xawrY3Y

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\fortnite-hack-hxd.html
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3520
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff80e7a9758,0x7ff80e7a9768,0x7ff80e7a9778
      2⤵
        PID:4532
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1768 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:8
        2⤵
          PID:4888
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1524 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:2
          2⤵
            PID:2452
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2824 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
            2⤵
              PID:1016
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2816 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
              2⤵
                PID:1364
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2096 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:8
                2⤵
                  PID:3120
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4960 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                  2⤵
                    PID:2884
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4996 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                    2⤵
                      PID:4828
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4628 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:8
                      2⤵
                        PID:4120
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3148 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:8
                        2⤵
                          PID:692
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=2820 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                          2⤵
                            PID:872
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2908 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                            2⤵
                              PID:420
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3808 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                              2⤵
                                PID:2332
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3612 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                                2⤵
                                  PID:196
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2812 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                                  2⤵
                                    PID:2128
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=2904 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                                    2⤵
                                      PID:2920
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4788 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                                      2⤵
                                        PID:5088
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4888 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                                        2⤵
                                          PID:3556
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4144 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                                          2⤵
                                            PID:2812
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=1816 --field-trial-handle=1860,i,1878842992168899599,4779825628084033303,131072 /prefetch:1
                                            2⤵
                                              PID:4604
                                          • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                            "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                            1⤵
                                              PID:1620
                                            • C:\Windows\System32\rundll32.exe
                                              C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                              1⤵
                                                PID:2760

                                              Network

                                              MITRE ATT&CK Enterprise v15

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5542cb7a-eb90-4ad8-b458-f74b83824e26.tmp

                                                Filesize

                                                5KB

                                                MD5

                                                759e8ba569e96079b45345f9b2983264

                                                SHA1

                                                0404778518b1ed153f4f7f83da95d4a36fce98e3

                                                SHA256

                                                8e435b198d6bb9984fedec228eb14693cda11c1af2952789118296ee55b714b0

                                                SHA512

                                                16d52fd38290fccf572fec3f2cc7127a5a54329c2b1e89d22275b5c2bf6ba6cef4549c4c0f6ad90d1388ce71d5bf43f995a4aa8e43e7387078a474eea73e2df1

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                5KB

                                                MD5

                                                4b7cd32e1db4a953016c8ea3f9893cf0

                                                SHA1

                                                de11197efec154e898b39fdcd672bbd02090b3dd

                                                SHA256

                                                cc8ddebc4f40c4ca655032c6e7a1138c6f710071305cf2363fd021938d0e4098

                                                SHA512

                                                57d3ba3051ab29f40623bef111970eae9c0c491f574cbb47fce361e03a1eb8ac2249401bf28e6429e72155eb0110b23946da85cd38a4fda6f4fc771f687bdd9b

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                5KB

                                                MD5

                                                2a635ecfa901d1bcdfd26f446e2cf73d

                                                SHA1

                                                4cffd6ccc4e23bad51425281a6e05a0f88401cd5

                                                SHA256

                                                c5664a178dea586f18849fa893275b0d7c5d9a815e0face2c7fd0a86777c66ca

                                                SHA512

                                                fdc96627599121e7f91d29fccce22540c34258cec6f7ef8bb8dca7290232dc98fa20ddf8cdac493e8402eea575d38607d34fc7862eb35a84b3ba30b8c5949f34

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                5KB

                                                MD5

                                                b267f7a987ca333caba34c54d9eaef38

                                                SHA1

                                                f2c5d31b54960810b534802862122f0428cfd60b

                                                SHA256

                                                f194a8084b58bf56ce7892460093b62b2dc7dcddca49ced2c0b1caff7a4faeef

                                                SHA512

                                                531ea01e78c83d469abae6559f65586a799f710594d1c9221fe9259f8210931848f87002ea82afb118d299ce8a60b41d03b3676a0f8c5f1e64d1d68ed4e1ab0a

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                6KB

                                                MD5

                                                e436b86f9eedcd326db2d579f2f0c5fc

                                                SHA1

                                                8f03b7f76d1b4922aed4bc8fc9d20362b27324be

                                                SHA256

                                                bd2742744e7fb2f8bcab106549071a22786df6c5a708c83043a03704417bcbaf

                                                SHA512

                                                5dec358dcc07360ab44a898ff5f129453794a52abbfd880165db1b767c6395a52e67c57ec2942abb1fe7251109fb4877a8232cf2c8a17581a2c8d2c31d387985

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                5KB

                                                MD5

                                                9a0b72b84a3f4ca4226218cd02a5cf8f

                                                SHA1

                                                ed7e4ad4931cbe94efaa26b872e7b67e0970f6ac

                                                SHA256

                                                be6d1adeedbc48c64d1e3f6d33d45fab7f16f88deacf6ca94b6228111a04b080

                                                SHA512

                                                cbcb76a3b88e880036f53e314a54152edc4868289f752467a1dbb68f14ef7e4259bc5bc7003f7fcaf7559bc6b1a0351d7ab050d69547a462858682baf4ed1944

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                Filesize

                                                130KB

                                                MD5

                                                a17923865890b7249fdfb9ee5a710e94

                                                SHA1

                                                5a4b6932aa6bb9e8c080f6c229474afa5d418efd

                                                SHA256

                                                bc4145750c867b576d74d87944b0103eeed23bc4a7fb7e3deeaf5bb66164f2c6

                                                SHA512

                                                ece2a25b6aa95062e546aeafc9fb8964f5e8b61d5d106ab2706b804588cc4a92f2066672d9ef80daef7a74f978a29179f67078b6d050452aa16b03e9daebe7a6

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                Filesize

                                                130KB

                                                MD5

                                                8229554a3abae0060acdbeed7715221e

                                                SHA1

                                                ee2ae1e8f4136a46e3cb335885085260b77cc37d

                                                SHA256

                                                e10ba1b7a9563b5f46aa6822534ec54f0e8b0bd647e9955c2661da2b2904a498

                                                SHA512

                                                1f96c692797f01aad2012241faeab0e98527a0531528f9636cf8d7860d244d0ffa032af35be3fdc94d0c7a6b4b58b1e732627e18f892b5f96474aae9438cfcce

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                Filesize

                                                130KB

                                                MD5

                                                405173f15800375e63fe19baeed19b1b

                                                SHA1

                                                f825ef8af802bbfaef52e7d916685551e8532ecc

                                                SHA256

                                                2c838ca721116d4b1d7f935a0151c995ad654533c80fcfd8d718ef8a8dbd1fac

                                                SHA512

                                                b3fecc01b11cf6b2c49319bf94bd4148e46727a415a212c151f1f0be1122ba2468f5a4a228016d2d3f8f010304697afb2a2531a195745b2d35011a5bda5f364d

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

                                                Filesize

                                                264KB

                                                MD5

                                                f0c4e13d2beefd47f3810eb6936d7890

                                                SHA1

                                                d6a7f589e90531b7fe00009d6e019293b5a036de

                                                SHA256

                                                637791ad457f9b41ac6e50662d505fd156f084b42ad997d9491327b902c30730

                                                SHA512

                                                f346b67ddb71a87176b795104411d393e07d4ed094add4904ac84b2af188e686939e1ac70335e2abb54f7f20a5456449f1494d4ff9e2bf9ddc971b5059f523c8

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

                                                Filesize

                                                2B

                                                MD5

                                                99914b932bd37a50b983c5e7c90ae93b

                                                SHA1

                                                bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                                SHA256

                                                44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                                SHA512

                                                27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd