ae49d51ca93adebeea1eae0fe3645809fe91671f63b2c8f2569a035d6ae7d38b

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-11-2024 11:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Fortnite Injector.exe
Size

19.3MB
MD5

ed11275c3b52832a70a587881063119c
SHA1

cf683a8b89fbc3fe33def040d5162dfde6b5e97a
SHA256

8172bea54cdd86a33e69f8c8fbf5fc1ddf4a0871ac7687ac7d6e24f87995ac97
SHA512

56f32a3997d3d35c3aae15c791770950c8f507e345987c6392e4a2a1e0777aba2ec62c14cb8761657720ca9a32cd1becd8e8d5ef33dce047753bf6e5349f7413
SSDEEP

393216:yoVRoOnzDdQuslA/m3pql9AJ4ZoWOv+92+nPV4aet2oKWjnHWA:yoHo4vdQuRKyS4ZorvS2iMt2oKWz2A

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 7 IoCs

pid	Process
264	Fortnite Injector.exe
264	Fortnite Injector.exe
264	Fortnite Injector.exe
264	Fortnite Injector.exe
264	Fortnite Injector.exe
264	Fortnite Injector.exe
264	Fortnite Injector.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 264	2420	Fortnite Injector.exe	30
PID 2420 wrote to memory of 264	2420	Fortnite Injector.exe	30
PID 2420 wrote to memory of 264	2420	Fortnite Injector.exe	30

C:\Users\Admin\AppData\Local\Temp\Fortnite Injector.exe
"C:\Users\Admin\AppData\Local\Temp\Fortnite Injector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2420
- C:\Users\Admin\AppData\Local\Temp\Fortnite Injector.exe
  "C:\Users\Admin\AppData\Local\Temp\Fortnite Injector.exe"
  2⤵
  - Loads dropped DLL
  PID:264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI24202\api-ms-win-core-file-l1-2-0.dll

Filesize
11KB

MD5
740172fbadaf5ec1c087864972779dd4

SHA1
24dc24efe6b823b3dab6abdac21948096e784a7c

SHA256
02c9f0158565034baa66d94ab3bd7b35732c871933ce2b85442639dc9e2ba721

SHA512
e59b894eb84ade8943defe17c251087580e882565b57c160df137f6e6a957fc296f6f14e853350db2c17b96d7016cc544f7fde5fc14762c9c90ac19e1f7941dc

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI24202\api-ms-win-core-file-l2-1-0.dll

Filesize
11KB

MD5
e6f48279f9721c34af7b74145dd888a8

SHA1
a72065e72185db0127717eb8cc70f15feb8de68a

SHA256
c6c4529917c20ef5d1c13adefcd3d594198372b765e3766190ce35ec0f9cabc2

SHA512
72beb368c205a909b363839a4553fc780e536663df2f19095819f1048d9ebe07de6d3b9b1859143703be233be64537fb117d55a9a9fe4bf7d56f812e71fcf49f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI24202\api-ms-win-core-localization-l1-2-0.dll

Filesize
14KB

MD5
38edcee1dc735c2259604545fd580aa9

SHA1
60fe52917c0f94f89cd46e1fc4e5924b79d6f0fb

SHA256
ce6855146cba2a1471cb356ae5e249d668243bc5369ea84d2d1902789f7805b3

SHA512
1ffe5328bcd91c22a8eae3b3c696a08a46937c359bf8e52497f2ba353ef4b1e791794a878597c8d05212ab7bf15b8105d695280eb7e69fe9071ffd4c373b981f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI24202\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
12KB

MD5
2f17d6384b532dfc41b8d80d2605c101

SHA1
9abd5e43ede2d3c29ce4d394b5259ea25727bd90

SHA256
1410ca328d46dd446857a6d89a191eba28bb169f1e0ed12033af3ff5d03dc5a6

SHA512
9ea3878cb0ae958d5ac50c238eb96289ffb47f99beb9053ed6e02f548cc71352b91a8ffa0010ed2a0f9b19b40a96927f8d121208e7339598ea91cdb108c7957f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI24202\api-ms-win-core-timezone-l1-1-0.dll

Filesize
12KB

MD5
202babbfc439861c13377e652a1b5a89

SHA1
e68ca975d19c9d6fb6575abc8400d6e8d12814d2

SHA256
dec0cb4e7b45d9881179f4ec40b19420edfa8f1e2ef3c7bb25a39a67a0773d46

SHA512
1dd136d4a04096346a6c1606d9da456ee3638386fe1303b51924f9dd39dff0a5cff1c4170a82d2e7d7b409d303581f55b38166025222b4746165c029534234c0

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI24202\python310.dll

Filesize
4.3MB

MD5
deaf0c0cc3369363b800d2e8e756a402

SHA1
3085778735dd8badad4e39df688139f4eed5f954

SHA256
156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d

SHA512
5cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI24202\ucrtbase.dll

Filesize
986KB

MD5
ce2f9a4268bb6bf909978b1f3d2d7486

SHA1
fd96b9a0f05325d5c1a01efc0854a4efe359424f

SHA256
d2eb64172cdf893cd980dced96d7077578fbd22dcbeaec357ecdf865aa85a8dd

SHA512
c66e39f16a4fb04c3d57771ac60bf979f55933e7a33ee4675de5de10819f2f5689927ec09a74724797f058e35b66093f0a03a1235f6298d7016016dc12b5ea7a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads