85ad2e8ea6fa3e4a9e156514eb4ca74b2b846420c4d4d5d8e1f840fa722ac401 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/06/2024, 13:58

Sharing

Report Analysis Logs

General

Target

fortnite_GenV2.exe
Size

12.7MB
MD5

3537262e3aaca5e9b7e8bbfa401568a9
SHA1

5925fce917694c7aa99b68c8c989bd4b0086d985
SHA256

85ad2e8ea6fa3e4a9e156514eb4ca74b2b846420c4d4d5d8e1f840fa722ac401
SHA512

fbc974b6160a58591b9b8a959bbab73ca00c4441820c64e35271df1dd5e9f2fb69d10617b7c8f1aa648bd3c518c6d4f182a6240740ebf10f1747c76530883afb
SSDEEP

393216:pGQdqUL01+l+uq+Vv2dQJlewF3MnG3xl5x+EnmwumOB:pGq501+l+uqgv2dQT3MGxgbL

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2644	fortnite_GenV2.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 2644	2292	fortnite_GenV2.exe	28
PID 2292 wrote to memory of 2644	2292	fortnite_GenV2.exe	28
PID 2292 wrote to memory of 2644	2292	fortnite_GenV2.exe	28

C:\Users\Admin\AppData\Local\Temp\fortnite_GenV2.exe
"C:\Users\Admin\AppData\Local\Temp\fortnite_GenV2.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2292
- C:\Users\Admin\AppData\Local\Temp\fortnite_GenV2.exe
  "C:\Users\Admin\AppData\Local\Temp\fortnite_GenV2.exe"
  2⤵
  - Loads dropped DLL
  PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI22922\python311.dll

Filesize
5.5MB

MD5
9a24c8c35e4ac4b1597124c1dcbebe0f

SHA1
f59782a4923a30118b97e01a7f8db69b92d8382a

SHA256
a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7

SHA512
9d9336bf1f0d3bc9ce4a636a5f4e52c5f9487f51f00614fc4a34854a315ce7ea8be328153812dbd67c45c75001818fa63317eba15a6c9a024fa9f2cab163165b

Download Submit