Resubmissions

18/06/2024, 07:57

240618-jtd71sthkb 1

01/06/2024, 14:06

240601-rehwnaec6y 1

29/12/2022, 21:46

221229-1mryzaec36 8

Analysis

  • max time kernel
    151s
  • max time network
    275s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    01/06/2024, 14:06

General

  • Target

    MinecraftInstaller.exe

  • Size

    31.8MB

  • MD5

    24c96f96660bcedbf8648c8e43c3630c

  • SHA1

    127dbeec1e9a7b8db42704172ba9e9bae0269754

  • SHA256

    2b0e05e169643319074f306153e55f2d839adb0378d6e721c04198233b892bfa

  • SHA512

    ed01d726284b92f0c594db2b4644903109c1f7ec650b6572207d1f1d8fe26e97dd3d89df6296b625023f0c63148b5ae543db21573c60aa487c57414219e3916c

  • SSDEEP

    393216:Ubekuyo9nMK50UGRXLePuq2ZWy/c5zFviMKe2OHmwv9CsTmsueFFza9yt:vZn/G4Gqk1cWe2iTVCMue3T

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MinecraftInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\MinecraftInstaller.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/576-0-0x000000007501E000-0x000000007501F000-memory.dmp

    Filesize

    4KB

  • memory/576-1-0x00000000001C0000-0x000000000218A000-memory.dmp

    Filesize

    31.8MB

  • memory/576-2-0x0000000006FB0000-0x0000000007172000-memory.dmp

    Filesize

    1.8MB

  • memory/576-4-0x0000000075010000-0x00000000757C1000-memory.dmp

    Filesize

    7.7MB

  • memory/576-5-0x0000000007C60000-0x0000000007C68000-memory.dmp

    Filesize

    32KB

  • memory/576-6-0x0000000075010000-0x00000000757C1000-memory.dmp

    Filesize

    7.7MB

  • memory/576-7-0x000000000AE80000-0x000000000AE88000-memory.dmp

    Filesize

    32KB

  • memory/576-8-0x000000000AE00000-0x000000000AE38000-memory.dmp

    Filesize

    224KB

  • memory/576-9-0x000000000ADE0000-0x000000000ADEE000-memory.dmp

    Filesize

    56KB

  • memory/576-10-0x0000000075010000-0x00000000757C1000-memory.dmp

    Filesize

    7.7MB

  • memory/576-11-0x0000000007980000-0x000000000798A000-memory.dmp

    Filesize

    40KB

  • memory/576-12-0x000000000BD00000-0x000000000BD26000-memory.dmp

    Filesize

    152KB

  • memory/576-16-0x0000000075010000-0x00000000757C1000-memory.dmp

    Filesize

    7.7MB