499618720448f385fa534cbf3f095de2637595b50a2baba9ef60be9276efab1a | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
30/04/2024, 16:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

DriverFNPrivateFortnite_4.exe
Size

8.1MB
MD5

60b782c19ef27a231701ce0e9efa3b78
SHA1

4574d42ae1dd2d52789a2b32d5b07f6f6a76fba3
SHA256

499618720448f385fa534cbf3f095de2637595b50a2baba9ef60be9276efab1a
SHA512

36d61f31c0eecd7d75cc871e807bf69ab4d8387f034417db4ad60171cc4aaa47bbb825bf047c87822211780fd98f6ed42104485e55b2f70684bf62ada4a3093e
SSDEEP

196608:X9GjnFoVzKsFWQgxzkchb6leC2PJ3/4600iY2eS:EjFyzKaAxz16Iu6BV7S

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

resource	yara_rule
behavioral1/memory/1904-1-0x000000013F7B0000-0x00000001408E9000-memory.dmp	themida

C:\Users\Admin\AppData\Local\Temp\DriverFNPrivateFortnite_4.exe
"C:\Users\Admin\AppData\Local\Temp\DriverFNPrivateFortnite_4.exe"
1⤵
PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1904-1-0x000000013F7B0000-0x00000001408E9000-memory.dmp

Filesize
17.2MB

Download
memory/1904-0-0x000000013F7B0000-0x00000001408E9000-memory.dmp

Filesize
17.2MB

Download