Fortnite hackers, GET HACKED? Redline Stealer MALWARE ANALYSIS
If you download Fortnite or other game hacks (or cracks), there's every chance that you'll get YOURSELF hacked and not even know it. This malware is how many streamers, gamers, and YouTubers have been compromised. Further analysis will be made available at:
https://www.jaiminton.com/reverse-eng...
(Tools)
Hollows Hunter: https://github.com/hasherezade/hollow...
dnSpy: https://github.com/dnSpy/dnSpy
ILSpyCmd: https://github.com/icsharpcode/ILSpy/...
Detect It Easy: https://github.com/horsicq/Detect-It-...
CyberChef: https://gchq.github.io/CyberChef/
(Commands)
====
hollows_hunter64.exe /loop /kill
====
====
Start-Process -FilePath "hollows_hunter64.exe" -ArgumentList "/loop /kill";
Start-Sleep -Milliseconds 5000
$a=(gci C:\Users\Barry\Desktop\FortniteHacks -rec -include *.exe);foreach ($b in $a){Write-Host -ForegroundColor DarkRed "Starting Malware";Start-Process -FilePath $b};
Start-Sleep -Milliseconds 60000
$a=(gci Hollows_hunter.dumps -rec -include *.exe);foreach ($b in $a) {Write-Host -ForegroundColor Yellow $b.Name;Write-Host -ForegroundColor DarkGreen "Config";(ilspycmd $b|grep -A 3 'IP = "').Trim()};
====
====
$a=(gci Hollows_hunter.dumps -rec -include *.exe);foreach ($b in $a) {Write-Host -ForegroundColor Yellow $b.Name;Write-Host -ForegroundColor DarkGreen "Config";$c=(ilspycmd $b|Select-String -Context 0,3 'IP = "'); $c.Line.Trim();$c.Context.PostContext.Trim()};
====
(More Reading)
https://any.run/malware-trends/redline
(Malware Samples)
Fort-Loader.exe - https://www.virustotal.com/gui/file/3...
Fortnite Hack.exe - https://www.virustotal.com/gui/file/1...
Fortnite Loader.exe - https://www.virustotal.com/gui/file/f...
FORTNITE.exe - https://www.virustotal.com/gui/file/e...
FortniteModMenuV3.1ByNoramid16.exe - https://www.virustotal.com/gui/file/5...
(Credits)
Music: Nightchaser by Shane Ivers - https://www.silvermansound.com
Music: DriftMaster by Shane Ivers - https://www.silvermansound.com
Music: Higher Up by Shane Ivers - https://www.silvermansound.com
Music: La Pompe Du Trompe by Shane Ivers - https://www.silvermansound.com