Analysis
-
max time kernel
139s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
14-01-2024 03:59
General
-
Target
Wurst-Client-v6.35.3-MC1.8-OF.jar
-
Size
11.8MB
-
MD5
83813fd2a6f492ad9f62ef3859d742fc
-
SHA1
54043d07e1254ceed1bd2f380e2aec1a0faedd7b
-
SHA256
74746620015a769d1182e089a8ef3bcb969e473529aa39ae5fafefaa213936ea
-
SHA512
a509ceb1762274d58ad63c89d77074722548446fee247716b235e7abab3ddab0462bbf35be51e478e07b541411369462ee7064bd47f8976b26b6c5419d874790
-
SSDEEP
196608:IF1nSxDqz2SWQ/Gf0g9zQ5m4XPJ4t6vdvFV9S8JY58mZODUcnHgXjaDY9KAEUvnT:IHnSx2Pg9UZXuQdS8tmZOwJXjrKjUfOK
Malware Config
Signatures
-
Modifies file permissions 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar C:\Users\Admin\AppData\Local\Temp\Wurst-Client-v6.35.3-MC1.8-OF.jar1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\icacls.exeC:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M2⤵
- Modifies file permissions
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
46B
MD592cbf148964a718f1a085936946bd6e5
SHA16cd3c73ba62c522e36f19dce194b15268b6ace53
SHA2563a8197005b09b0cd13c214ad2577a02cc5594a0e954ea85e6652f1a4c0824dce
SHA512bbc0e1991ca1f7a4cfd7182a39362b8da77a98bf0aaf9db7eccd5a6f663be37ee9c050a8e080de7f47ec43d84f2a69f1d2f0b411678bdf666ae55a731025a2da
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB
-
Filesize
16.0MB