Overview
overview
3Static
static
3NEW FORTNI....2.exe
windows7-x64
3NEW FORTNI....2.exe
windows10-2004-x64
3NEW FORTNI...Z4.dll
windows7-x64
1NEW FORTNI...Z4.dll
windows10-2004-x64
1NEW FORTNI...on.dll
windows7-x64
1NEW FORTNI...on.dll
windows10-2004-x64
1NEW FORTNI...rp.dll
windows7-x64
1NEW FORTNI...rp.dll
windows10-2004-x64
1NEW FORTNI...og.dll
windows7-x64
1NEW FORTNI...og.dll
windows10-2004-x64
1NEW FORTNI...ip.dll
windows7-x64
1NEW FORTNI...ip.dll
windows10-2004-x64
1Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09/11/2024, 21:23
Static task
static1
Behavioral task
behavioral1
Sample
NEW FORTNITE HACK V1.2/NEW FORTNITE HACK V1.2.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
NEW FORTNITE HACK V1.2/NEW FORTNITE HACK V1.2.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
NEW FORTNITE HACK V1.2/plc/K4os.Compression.LZ4.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
NEW FORTNITE HACK V1.2/plc/K4os.Compression.LZ4.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
NEW FORTNITE HACK V1.2/plc/Newtonsoft.Json.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
NEW FORTNITE HACK V1.2/plc/Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
NEW FORTNITE HACK V1.2/plc/RestSharp.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
NEW FORTNITE HACK V1.2/plc/RestSharp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
NEW FORTNITE HACK V1.2/plc/Serilog.dll
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
NEW FORTNITE HACK V1.2/plc/Serilog.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
NEW FORTNITE HACK V1.2/plc/SevenZip.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
NEW FORTNITE HACK V1.2/plc/SevenZip.dll
Resource
win10v2004-20241007-en
General
-
Target
NEW FORTNITE HACK V1.2/plc/RestSharp.dll
-
Size
940KB
-
MD5
9c861c079dd81762b6c54e37597b7712
-
SHA1
62cb65a1d79e2c5ada0c7bfc04c18693567c90d0
-
SHA256
ad32240bb1de55c3f5fcac8789f583a17057f9d14914c538c2a7a5ad346b341c
-
SHA512
3aa770d6fba8590fdcf5d263cb2b3d2fae859e29d31ad482fbfbd700bcd602a013ac2568475999ef9fb06ae666d203d97f42181ec7344cba023a8534fb13acb7
-
SSDEEP
24576:FkZ+EUPoH5KTcAxt/qvRQdxQxO61kCS9mmWymzVPD:FkMAlM8ixQI5C6wl
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2256 wrote to memory of 2784 2256 rundll32.exe 30 PID 2256 wrote to memory of 2784 2256 rundll32.exe 30 PID 2256 wrote to memory of 2784 2256 rundll32.exe 30