Resubmissions

28-09-2024 23:25

240928-3edsgstdle 10

28-09-2024 23:20

240928-3bjvbstcjf 7

Analysis

  • max time kernel
    49s
  • max time network
    51s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    28-09-2024 23:20

General

  • Target

    Free-Fortnite-Hwid-Spoofer-main.zip

  • Size

    13.9MB

  • MD5

    916d25b0917489ce049397f885b07f75

  • SHA1

    ac48f086cc3b769d6b5f9e194329dfa9946e1f24

  • SHA256

    64fe939bdf7ce6702759b7ece2482a365ec06cd742e46f2b5ee87e766c9a1168

  • SHA512

    f9eceff977635260659ac24e825a0f971fcb2f216c039da54c2350b021a0cd1e25f9eff75470b2aa90aa90063d1361c8efd18a26ef60a6e2ee81e67d5050928a

  • SSDEEP

    196608:Y4t4b2VYuO9EjW+gZ9Lu7XD2jbgMleIJS9tGbDkkxmTsmYm0HKdbFrQzTV2bN9V1:Y4tVH2ExgZA7XaQMl1JSabQAKdbF9JJ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Free-Fortnite-Hwid-Spoofer-main.zip
    1⤵
      PID:3004
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4752

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\Desktop\AssertSend.asf

        Filesize

        751KB

        MD5

        3be7f1f6e404937f692a48f0a6167965

        SHA1

        d6d69c5e9101c756165797005ca8340c6d5dc976

        SHA256

        8157b330c8fd02be7dabe576b0e9c06e122edd7d7449542dd04e7963780b98a0

        SHA512

        a7eb120eb1590b1a34a101349969a679afd6476d821ce845a538b9da5018100386ab268e35c43be5d49d330ea16b853b55c51533129c44a3468c841695a64286

      • C:\Users\Admin\Desktop\BlockWrite.docx

        Filesize

        18KB

        MD5

        43230f0c0be3711b9d1dac2883c9489c

        SHA1

        d76ae4dad494a1328a18ca5f4d408f36805aaba0

        SHA256

        9033cdbf760d8dd83a0799dababd978dbf3d19498aac882a63bb442c98332d4b

        SHA512

        4a59941a5aade85cba490e2210e3ef8b7ecc5156eb4f34abe954a1ce86da04b6ee004bd9770dd40caa5bad1b9f9b982556e9e4a285a2791c2fb6e39171b55064

      • C:\Users\Admin\Desktop\ClearRestore.wdp

        Filesize

        508KB

        MD5

        54761ecc8515c7d3b58b5d80d3564341

        SHA1

        d9cdd7114d97ecb279366c07263b8a514d6e4392

        SHA256

        f772ae06b8dfb2ac9c4bfe367dd53ebb55aa2959c3df54c34afd4195afe59b8a

        SHA512

        04aa04c531dbc4b0c221f0fb8379f2fe65f92131caedc9c94e8431527e970fcea9cbf2cdf7be64573aede9e71f38200471f8ef4260eebf231657da2e52cded7f

      • C:\Users\Admin\Desktop\ClearSend.docx

        Filesize

        484KB

        MD5

        2dae726dec43510b08761203a42660e7

        SHA1

        5fa428955b8989175e0ee7045a0b110cde3b10a5

        SHA256

        4b9676b11f05c39bd3fed347038300f61db51e592be851bd752eb4d788ed49fc

        SHA512

        782be032a3d5312d69e167ab52acd95f7f2748e5d33258e5a42fc99887d9580837f6b79d41840a12e70bee339e821db295442524cfe0abc5ac29629dc6a182e7

      • C:\Users\Admin\Desktop\CompareSave.svgz

        Filesize

        872KB

        MD5

        5dedbcac77c9e763b3633fc301de1eb0

        SHA1

        5fbd813fafc7d6e5d48ea2d4b16de21dcc08bb80

        SHA256

        e3326cda3ce75d16bb99c7b5d901f6afafc9b8e47077afbcd60bf6315e9d049e

        SHA512

        a1616fbeae758699f4edbc270eecaedfc775d65205abd6bd66045854e374bd876c3ca982aecf91c1a52f12545080b7f5299b82f31fae680b0c24d63b54afce37

      • C:\Users\Admin\Desktop\CompleteStop.ps1

        Filesize

        799KB

        MD5

        0812855e0f12c814f0c6f0397fac046e

        SHA1

        e63b5f693b2a43dbbfd9afa24f22ae7cd4e0e3c7

        SHA256

        9569989ae8a068ecbda64c01b8d802207a06d85ddd81a9689e019a1cbe0da66d

        SHA512

        cb72d5052c76d6a045191704999d3f479e6d59d0d286c50ff48f5cadee4847e9f86ba94c042c00b1b247195c5abe64bb9f9efac1c61af3e80c1b4cea4f70b6e6

      • C:\Users\Admin\Desktop\CompressClose.i64

        Filesize

        460KB

        MD5

        9cb7381811252b168cb9e9d949e5e922

        SHA1

        3d387b10c1e7f1754d4904ba502f6364a4542fce

        SHA256

        46d0cb4ea6f6f5e507296c0109522adc7140d5cb4e0c905b2ab73ac209feffda

        SHA512

        b95e08fe53703f21e7a36fdaec3666634e4a77e7b2d292ac5720220d837f1d5b0975be9f8a26247057a4959cc6d428e1133ebf1831b4a9865c7b7f9f8ca6daa1

      • C:\Users\Admin\Desktop\ConvertGet.htm

        Filesize

        412KB

        MD5

        174eab84daf4563b45401ee6e3cdd0f1

        SHA1

        56b41f6b59c1e925a1ea0b1e84495e7fe8df912a

        SHA256

        799e5ee294327f0017e6d97abc442ff08bf20ec04bda3434b04111bf0f548709

        SHA512

        846f9ec28e66768c0c5b3b6537e4207cdf08aa5708e2fbf2dc38d6cad80056f28e9fd94f0d37f83071ae54795dbbd8b57a05347fc2fbfdb87362778377228ba5

      • C:\Users\Admin\Desktop\DebugProtect.mp2v

        Filesize

        896KB

        MD5

        220061deccbb9ca3eca53785353f1b08

        SHA1

        476393cfb410748404ab54e6b420b81d41dcc573

        SHA256

        1690de3f289eb264658f26af0e2acba228b9729eb6d07a72b0f160ab64c0ac99

        SHA512

        d3dcd61e006d6aaa78106709895faaa6926cff601a243a7847809874ac01eebe73113ae7112a5154233a0ed690de4aa8454acad15fed851df1e6980855f24628

      • C:\Users\Admin\Desktop\EnableEdit.gif

        Filesize

        848KB

        MD5

        b80efbd99fe3b57bef6cc9dd7c073bd1

        SHA1

        5a4f8a813a363e886c9242b4d9fc396d2ab1b2f5

        SHA256

        8d37cf20ec0635d40f1a83b97e70927250244259953a7216782b255c267523f4

        SHA512

        3e10bd287821c5008ff82d1f498173dbe3c3e9a61018c3fdab64b2e03aab15bd3e7a8f3237459972dfcab2d0512bcf08b986bd5d34b86f370eb2b0868796e697

      • C:\Users\Admin\Desktop\ExitSwitch.css

        Filesize

        678KB

        MD5

        778a1cb9eef356fd09f4ecd267c8b65a

        SHA1

        6616c65cdebda9a4ddb6f34a19b447cd65417a11

        SHA256

        7505bde59061a3c12cea8171edb1de9ddcfc0db6b4e7eeab0812eb9e17cb6c07

        SHA512

        cd7f6193184e8148ef433c60db68727121ba0a0ae375b7eef6f2b1aea8f80516bce019d7738c3cd6e299b853e45e79f5070ecaf43d386422f11409e5016955b3

      • C:\Users\Admin\Desktop\ExportNew.clr

        Filesize

        702KB

        MD5

        3c7352dce846baee58af982c6c19bb8e

        SHA1

        441ce783b1ae38991193199cb66141f16971af04

        SHA256

        e99e05e4f6e0a86e7c2c3eaa310922b7f74322be6f82a58ef676d42bcb82e8da

        SHA512

        d8838339761e7d41f1431009220cdbfb782282aaf1023a6c73390f68a8d1cc230fd1f27c79e2b60ccfbfa566f99e043c3141db51befdf2785b9dab1b123f9642

      • C:\Users\Admin\Desktop\FindResize.vstm

        Filesize

        557KB

        MD5

        afe30c55f4ecf03c31493d6fd754cfb1

        SHA1

        a5745e4ccb22c00d187bdc15634876a9cb0e6f27

        SHA256

        2a023d0a5c0548e811e8373d431c719140aba1ecf74dd457219acf7337da15f7

        SHA512

        19b7623a2d5f12f7153c00cbebc030685e2484bcee41a7e58b21bf6476f8e4e61831c06f7e785e1faff298b98609b22bcbf7456a4203800169e1ef20bd562b9c

      • C:\Users\Admin\Desktop\FindRestart.dotx

        Filesize

        727KB

        MD5

        76147939bd527c0cd901e1d2f29c227b

        SHA1

        76a97ac2cb3f75aeb043d41a8eb26c156e0cfb89

        SHA256

        217def3bcd0bac817d935409b70a0ac8e331acf18d5ba4afc9fdcfb062d73f31

        SHA512

        d80939a68323d7bf723da1da3def16c49aaa268b6c8b14b06bfc2cbdc70a120c1d5430e4b1a08e507df8c48a36b7404cd39a2e6aa44c4c2665204795aeb32c5b

      • C:\Users\Admin\Desktop\InitializeClear.odt

        Filesize

        533KB

        MD5

        93b5787c103be5e3438c638289cb412a

        SHA1

        3bc6a5ebfa2b747fdb267647ec8b50abbe36a505

        SHA256

        55ff0db05f697795c35cf8491a1a1ec226b16832246361b859b47bc016d809df

        SHA512

        83005abee6192a6ce2aebd3a34fe1db415c5ea4dc915a12a9e26fa47f45147c78965300f18beaa6c870695622c566797824a0fe2bd5a776484a6cad0a5fcdcdf

      • C:\Users\Admin\Desktop\InvokeSync.mp2v

        Filesize

        387KB

        MD5

        7de041eb5e0a9c99fe79a75f071dae58

        SHA1

        715852e34c2e7e1653974d9d2c45d5d7122bd71e

        SHA256

        aeb96551829045fe09940424b39a0acf3a35f6857405f08d461062aa23b32111

        SHA512

        f6f7cf3007e0d02b46214dc413c33f8ade3bd29d7241cbbc669ccca5dc587447faac579abf2a19af47fb6bcf16326694d9eba6795dc4c951f2466f0bc36c4c97

      • C:\Users\Admin\Desktop\JoinClear.m4a

        Filesize

        1.2MB

        MD5

        4cf8552423ac4c5ddf9aa1feb4d73952

        SHA1

        9ee15fbd8cb1a4d895c9bdcec49d296b60f4180a

        SHA256

        7b474b63b1451a0412c90b6cf0c96cb817097c1137f17d359220672a71e56f66

        SHA512

        8696cb71157a216f7e85d7118eff6475a2beb3afb12e5d7d08eb8889db44da22d0e7ce11a99bdb51e1c0d1a780a98a43e43021bb0e4f63ff457c5ba54a311218

      • C:\Users\Admin\Desktop\Microsoft Edge.lnk

        Filesize

        2KB

        MD5

        a4cd0f222a3d61b14539d9c227844baf

        SHA1

        4896334759933ee0dd10b17c134b86fe1499d499

        SHA256

        5cbe3f571479da0b2ea73265fc834f59918f4db33170d02fb9bed9ccbb6d1dd5

        SHA512

        7f3e8c82ff8d5254f951bc86e3a7812848e00379314cca4144ac4b5bb340c4188b1bcead0f5b89492653d7b7d4506c3b50336008d9b67e062446998562a12f22

      • C:\Users\Admin\Desktop\OpenExit.dib

        Filesize

        775KB

        MD5

        435ed105444434ed95a68ad2d8264dc0

        SHA1

        ced3e7fc6ff74e1fed32e7e563f8ddeb290d4c2e

        SHA256

        aea3b0373fd3d5caa4a8a29d0cb0a4ff3fe19b2303ef40812d7bab3cf48e337f

        SHA512

        069b82b8f3b98a58e72c6329f3a5ef313b361d21459e694b6f166a58c72bc045bdb4d37413341c99213f82a7135d86aeb8945af32658b2ed2245105e2751c06d

      • C:\Users\Admin\Desktop\RedoPop.ico

        Filesize

        654KB

        MD5

        420c99fd0615a6f45b5f151e2bebd794

        SHA1

        ef9ac7342327a193c58f6af0243e8efd89a38014

        SHA256

        1cec16a1b0bace14a88c9c3fff02fb5aaec324034cb1c16a651a7426c24a01d6

        SHA512

        74d801883edc09b90ab12a5e92b5cadc4e45da80b47e91637cab80bb9b1bb07ee777eb4c393dda5c5bf9983f354e9c37d18c8b935517ddb84fafa576df2caaa7

      • C:\Users\Admin\Desktop\RedoSubmit.jpeg

        Filesize

        339KB

        MD5

        c1dddd8e8dd295ed292063ada06670dc

        SHA1

        f1ce42739e816326c88865b5eb3924d13e5d1887

        SHA256

        e770e1cce9c1ab6aea311fa411b4d9dca009c8d905850e1e00b42067e2465117

        SHA512

        ee95c181bfa77402c0934e6d97ea0c632d84e1bd72bf1a32847f1aa78c081a9f1f54df6659b51b0eb7394d7b3d41983a6eda44f479d6fa58d16bae461a3c75fe

      • C:\Users\Admin\Desktop\RegisterExpand.rle

        Filesize

        315KB

        MD5

        52617b075df5776deb083a6cb0408b9c

        SHA1

        b6d266eb9e45ca28b4fa3e742b4285284a2d37bd

        SHA256

        feda555312fd96010ed6cc7a6e32058143dc49e598d875c57b09a947f3d111fe

        SHA512

        c74821f31e36746716f1b96eac5353d1963ae4fb3f146ef0145bb8ba9e0e77ff787dec33a912560ec91d1cce79003031a2d4ec6ca50e09fd64d27b12ae46ec50

      • C:\Users\Admin\Desktop\ResetEdit.xlsx

        Filesize

        16KB

        MD5

        40575f8f35cc0040f1e1333645452e28

        SHA1

        f22d115e3302c90ef3f86534662b0b298ba0e209

        SHA256

        d4599d5cc8bb5d5bb9b85dea40544fdb1c5e40aaacfbcdda8499da71d01be2df

        SHA512

        e8cc4408f18056a4aa66e0818bf72a7407449964bc704023b56ff5bcc6118488972d59d5b40457f2acdd6220d2ddbba543a5b51b07508f8cd602e49dd7771c45

      • C:\Users\Admin\Desktop\ResolveGroup.xlsx

        Filesize

        824KB

        MD5

        66024440ea3b8947868ec43bb5813eca

        SHA1

        a02f87b6b47d2071512fedc089457865efd39938

        SHA256

        1bf85068ceab31fe324662f2192e43b6ee2caf3aad7f09c460b888e604105b3e

        SHA512

        2fb69d6c37dde75b16adc87115f4350b3c47e608fb09f386abe4aff48d18807ac65c2bc7b2e2d9750800e99d5c5673af69dc909d74c460a370da0bd60bc78a19

      • C:\Users\Admin\Desktop\StartCompress.zip

        Filesize

        581KB

        MD5

        caa6fb21df4c52bbd4cae379edb6a087

        SHA1

        7f7a423d765bd58fd55be82080e7b1bc3dbd0c58

        SHA256

        637f7eeab45288da37471cea89707827f087f0423829265b34dbf7af9808eae4

        SHA512

        6bd955f71e231c59978cde549be40f23a49570227b7896a25ab6392d13e1c984c56285c2644497f91b9eb89ddcf9c257a736e70733eb9453a718bb8da050ac81

      • C:\Users\Admin\Desktop\StartConvertTo.vsw

        Filesize

        363KB

        MD5

        f7378f163c4ba41a23d6107157add07c

        SHA1

        99a0cc762b1d624c97a9ba32a391a4810594b9d4

        SHA256

        e3fd4fdf06a15582cbfb66fd4b0860843c45be28dcc22da8a572b34a81f27214

        SHA512

        7d7fb8c1e85af87ec89926d733b2f3b1ccd809fdfd9a8d8dbf6c478abf4fe82b0f8e2e057857b4e8945cd0640d92a8cb5df8fd449258576a85cd3c23dbe25244

      • C:\Users\Admin\Desktop\StopSave.mpe

        Filesize

        630KB

        MD5

        2110738db243876fe7ed5e2615e40e53

        SHA1

        d7e6851346e3eb51c9c1a1dffad74627efdcc3bd

        SHA256

        ee09d625131ec13d387641d1ba36db6fb34db8fa65229e4f35c68976f64c69b9

        SHA512

        894b2b636994d439a42dc4b6617d467caf68479bf4f46533a73752923873cf8ea6080c3f81baa34b0ec3b8fd6e84f2487a7ac1c0a084bacab2440a3fb02cac78

      • C:\Users\Admin\Desktop\SuspendDismount.scf

        Filesize

        605KB

        MD5

        68b765920c7105a39060f75f63fdce93

        SHA1

        edc0480fe27b39958ae0d881d1d81105475e15b9

        SHA256

        af75877d990837b0e4045ccbe5696cc9b7627324b7253ea6028db0452bc884b7

        SHA512

        df7ec704e9ba6fae0d22bb3507a85d981ec1058d9c032ce66597b7650d2b3716c3dbde84f70146f2bb13c7cee2418445260bfaa21cfeab74f84170cc065b2115

      • C:\Users\Admin\Desktop\UndoUnpublish.docx

        Filesize

        15KB

        MD5

        4853db97ef6a083f9f0e8d74244b9839

        SHA1

        4a41344962efae706fffeed1e4ff5ffab17197f7

        SHA256

        f76fba3599036a3c94c620833337de682844487110bdebf87902a887356f1497

        SHA512

        fcc06273ae5e1d3b6feb7f1f4682f9c8a1a1f41c77aafbc00b644c03eab829cdadf9ca4ddf79b1c9d267f22e2345b9415d3425a7eb1406e58cc92b532c85ccaa

      • C:\Users\Admin\Desktop\UninstallConnect.potm

        Filesize

        436KB

        MD5

        d7ee5234aa72e797c5972e6f393b15a7

        SHA1

        f1ce089effda86d37beb75a8db66fd98a3f9c0c4

        SHA256

        2498c4edeef69ef3452f80f30747dd6199af50a070a3f3d5cbcdc3abff7e27b4

        SHA512

        6ee5b6b95bcdbf1b8466f8f23033c543c7cb7da40f330d697b2b0f0e39229ddc99b0f7afd5fb064ea0a77fd0ab4dc500eb87c021824f54d9033e75a626a68795

      • C:\Users\Public\Desktop\Acrobat Reader DC.lnk

        Filesize

        2KB

        MD5

        74d3d574bbf76b32274c20f5a4efeada

        SHA1

        4f1233f93ead2c5c74516106b3fc6acb8f366318

        SHA256

        546d1d4251af138cc9d8579ed80aa352f7270e75fbe2a00bb713ff9e212c334b

        SHA512

        5e6f400a77242777b36a235d68e023d33ffded2dd9f988d1204c169849d995a0aa46e2bc267429f0fd5e234d4e9bba1d9a79104c55889adc953509ed73f9cf8b

      • C:\Users\Public\Desktop\Firefox.lnk

        Filesize

        1000B

        MD5

        3ce641e3b0dcb645856091154792bba9

        SHA1

        265ca7deccb64b150a9cc7305772900c4cc7d610

        SHA256

        5b456bc5ed47dc00b5ce358507b1adac6903612913a1cb0241baa72ba69dff25

        SHA512

        9c3737c553481491fb2a97af96a11dc07a10549f426aa392fa39e98cecaec1aaef71fb46a92c56df5dd9691593f1c6b027a9a48037741cf74309c5f2e425116f

      • C:\Users\Public\Desktop\Google Chrome.lnk

        Filesize

        2KB

        MD5

        f17395b8da9d8f3f88dd746546fa9ef1

        SHA1

        443037e6a95181b34868cfd1a98d1ab12a28fd84

        SHA256

        3ba3311257bde13c89024e36d1236ca51d39190f5e4dc6c7a4549b4332d7c757

        SHA512

        84e8594496eaab66ae23f008531520e800bf925b5f74d55551c7f45dc67568ff55e347cff2af8ae256cda36818a931d264efae5b585709057e1b570cf61610c2

      • C:\Users\Public\Desktop\VLC media player.lnk

        Filesize

        923B

        MD5

        d96583ff37f257a3de30e5749f3ba0b8

        SHA1

        c9ccca544871302f3d5457915f666d96d468bdff

        SHA256

        fe74377974241a855e9c548eb8d0dd375aa2face23cef0d0647fa65205eff4ac

        SHA512

        2b341c6a2aeaac181b3d7c01cba1e034c2ef2a04b284173773f8343b513f25c251790d1ec6aa01eb91f9a403359092bc53f15d45b778d05640470d31c1578d96