General
-
Target
FоrtniteHack.zip
-
Size
1.9MB
-
Sample
240420-zhs5sshe32
-
MD5
0dcf4480f1df3300f08512f5b2f8db80
-
SHA1
cdfbda645b49b7dc927e9ab892c60ff9164a577c
-
SHA256
f08d18ef54c1c42e9f1cb1425cc338ebc8de44b3307713d9a688406630a33862
-
SHA512
9a2fed856026d5b926d30940dcc09bb33ce7169aff4cc8efde8296f6636d2e4c318d91c028df81ae87d6119bf7681a6ca448278d6d58731dd6e97b8123107915
-
SSDEEP
49152:BVUsgjbMDXDKxOGNTot192/nE6xARGIYc+mskJi+UjnmTO41v5tbn3:BVj4QDXDK4sot1A/DaskJrUTmC41Btb3
Static task
static1
Behavioral task
behavioral1
Sample
FоrtniteHack.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
FоrtniteHack/FоrtniteHack/FоrtniteHack.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
FоrtniteHack/FоrtniteHack/libnettle-8.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral4
Sample
FоrtniteHack/FоrtniteHack/libpng16-16.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
FоrtniteHack/FоrtniteHack/libraryfolder.vdf
Resource
win10v2004-20240226-en
Behavioral task
behavioral6
Sample
FоrtniteHack/FоrtniteHack/options.txt
Resource
win10v2004-20240412-en
Malware Config
Extracted
lumma
https://productivelookewr.shop/api
https://tolerateilusidjukl.shop/api
https://shatterbreathepsw.shop/api
https://shortsvelventysjo.shop/api
https://incredibleextedwj.shop/api
https://alcojoldwograpciw.shop/api
https://liabilitynighstjsko.shop/api
https://demonstationfukewko.shop/api
Targets
-
-
Target
FоrtniteHack.zip
-
Size
1.9MB
-
MD5
0dcf4480f1df3300f08512f5b2f8db80
-
SHA1
cdfbda645b49b7dc927e9ab892c60ff9164a577c
-
SHA256
f08d18ef54c1c42e9f1cb1425cc338ebc8de44b3307713d9a688406630a33862
-
SHA512
9a2fed856026d5b926d30940dcc09bb33ce7169aff4cc8efde8296f6636d2e4c318d91c028df81ae87d6119bf7681a6ca448278d6d58731dd6e97b8123107915
-
SSDEEP
49152:BVUsgjbMDXDKxOGNTot192/nE6xARGIYc+mskJi+UjnmTO41v5tbn3:BVj4QDXDK4sot1A/DaskJrUTmC41Btb3
Score1/10 -
-
-
Target
FоrtniteHack/FоrtniteHack/FоrtniteHack.exe
-
Size
2.4MB
-
MD5
98d67174a64d76751fe7f5f9b59acd0f
-
SHA1
8ff6b05c0d393f398d8bf7f217b61ef4559e5051
-
SHA256
2350036f4d3ada372336a56429281f96d7deefc637246ede1668ef6a33f7b4b1
-
SHA512
55cf83aeb444d8a084987924fd808ca96b94aca405d261fb3702c78387298c5604f8fb8391affe6901a3875581c487ea46ab25ce589862b7cd7b8129e26867b9
-
SSDEEP
49152:2uWXVMDdRolOyNTE91NaLnq6x8DGLyGC:hiSDdRoUYE910LJR
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-
-
-
Target
FоrtniteHack/FоrtniteHack/libnettle-8.dll
-
Size
304KB
-
MD5
7d656bf1de08addd054e728391ef3519
-
SHA1
5067ca56b6abfdf410aa102495c1cf6d6484fbd8
-
SHA256
1916c2878bdc6349d84d1c6c219a934926937fc23ceb77c97d88b945dc3d644a
-
SHA512
0bb955e4800df357a2d46625ff9234712b283f1c27ba9ddef788569f06c031710d3e0df73e91f20db989d522f687d95f42d331fa85bfeac4ecd36347405a783d
-
SSDEEP
6144:YmVFPSeCiKBNFkDk5X5lTqqDMwlFlwKuMN8:YYPSeCiyMk5/OqFl8MS
Score1/10 -
-
-
Target
FоrtniteHack/FоrtniteHack/libpng16-16.dll
-
Size
235KB
-
MD5
342b5f5b3ba11e867f0765d8fb2789ab
-
SHA1
57a95502936c033a667172ab3a73f9ce5a91651f
-
SHA256
74d4708664ee397fe2b5be139792cd188857e4b61d399b9b4d9562f140b46f0d
-
SHA512
8723d3a22daede770efc542a0efca284fede977abc0cb5b18712e076a2bd68504c032f395ec5643ccd189e76a30b7ee244a5448d60d8067555e16c51a7b64b8f
-
SSDEEP
6144:PnClFOtV9yvLwdZRLFfn4lShPNEoDHHpwpFLhKN5:PBVQgRLFfPh1E+HpeKD
Score1/10 -
-
-
Target
FоrtniteHack/FоrtniteHack/libraryfolder.vdf
-
Size
125B
-
MD5
8760dccce6639e32519fae960c77e4c6
-
SHA1
9b21a349868ebcb3c11764e12366d7f301cdff93
-
SHA256
44d80569fa294e24ae57f189fe5a587f51e46e3ee2360b888b44d69b516c89b4
-
SHA512
a980c5e8809b32606849e97a95b3a4b5e9e8b131cf69cd36fc60275ad7173eceaad3fc3a6fa03cc0cafbc2545076172e983c0734637ca11374f3e7f1bceadb84
Score3/10 -
-
-
Target
FоrtniteHack/FоrtniteHack/options.txt
-
Size
4KB
-
MD5
65fb590f1386c03a055d6dec92694a11
-
SHA1
1150a89ec66cba8f5f1c4298dbba3ead338e9824
-
SHA256
844b5770d897dce925425aa264669840a2c726c11a7dedffa5f079f67dfea52c
-
SHA512
be46912c945282bdd38d464b9e3dbd866857f87530a87b26ccdc1a0424d2187424c9af0ec9c5f7488cddef905fcb0a5c5df46af49a98351aa2862c6cca8089be
-
SSDEEP
96:NRwKRxQVwRC8u6jIDv6bY3PyNbnUwiUQ4H6PDhD53jCDa2jADUj/WM6t62gKguYj:vPDtcv6bY3PyNbnUwiUQ4aPDhD53uDTd
Score1/10 -