General
-
Target
Minecraft Test.zip
-
Size
86.3MB
-
Sample
230316-xgkqxscd47
-
MD5
13ef4e058af33f2112046df90ba27af4
-
SHA1
70e79b5bc26d997b68cb95efd4216e3024364248
-
SHA256
5e5a2d7b08565282d3ead5e5a7dc98efcea1da71559b8caf2b3518765f117aac
-
SHA512
3bc3eac6e408755a3640c24f33de8870509b4562dba87574c8c0eca1e9b5e4449b9cc00c7e73a00a27f97cee894acafe79c803449363c62b665105c3870cb05b
-
SSDEEP
1572864:A4FJfqreEhGke4MLFLjJMWUNy4fLDRoXm8SKWSnOxNp0boFHaLmrCiCn1HgDrDwd:DFJfgeCYhd1MWayWMmcfOPOowuCz5gD0
Static task
static1
Behavioral task
behavioral1
Sample
Minecraft Test.zip
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
Minecraft Test.zip
-
Size
86.3MB
-
MD5
13ef4e058af33f2112046df90ba27af4
-
SHA1
70e79b5bc26d997b68cb95efd4216e3024364248
-
SHA256
5e5a2d7b08565282d3ead5e5a7dc98efcea1da71559b8caf2b3518765f117aac
-
SHA512
3bc3eac6e408755a3640c24f33de8870509b4562dba87574c8c0eca1e9b5e4449b9cc00c7e73a00a27f97cee894acafe79c803449363c62b665105c3870cb05b
-
SSDEEP
1572864:A4FJfqreEhGke4MLFLjJMWUNy4fLDRoXm8SKWSnOxNp0boFHaLmrCiCn1HgDrDwd:DFJfgeCYhd1MWayWMmcfOPOowuCz5gD0
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-