General
- Target https://download2325.mediafire.com/cqv2w6nbpzpgap1R47TZ5YCu1Z0oI04q3L0faQ2c9rU1kCB-2A9V99xcmmDnGHB_dIgeNlIi6r1PfAyUi8mkxlkea7nu_GZqMupgnni1Ltyw_-lbY3gM8cMcYq4O41lVw3c-joJqc779c-YQ9qkY29W2x80hjDdZSZSHHM3oMrqpNA/q1pcfiniu93mzb3/FortniteHack.zip
- Sample260724-r93jjsfr2t
Score
10/10
Malware Config
Targets
-
- Target https://download2325.mediafire.com/cqv2w6nbpzpgap1R47TZ5YCu1Z0oI04q3L0faQ2c9rU1kCB-2A9V99xcmmDnGHB_dIgeNlIi6r1PfAyUi8mkxlkea7nu_GZqMupgnni1Ltyw_-lbY3gM8cMcYq4O41lVw3c-joJqc779c-YQ9qkY29W2x80hjDdZSZSHHM3oMrqpNA/q1pcfiniu93mzb3/FortniteHack.zip
Score10/10Suspicious use of NtCreateProcessExOtherParentProcess
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Drops desktop.ini file(s)
Suspicious use of NtSetInformationThreadHideFromDebugger
Suspicious use of SetThreadContext