Overview
overview
3Static
static
3Minecraft....io.exe
windows11-21h2-x64
3$PLUGINSDI...er.bmp
windows11-21h2-x64
3$PLUGINSDI...rd.bmp
windows11-21h2-x64
3Data/Pytho...es.zip
windows11-21h2-x64
1Data/Pytho...SE.txt
windows11-21h2-x64
3Data/Pytho...30.pxd
windows11-21h2-x64
3Data/Pytho...__.pxd
windows11-21h2-x64
3Data/Pytho...__.pyi
windows11-21h2-x64
3Data/Pytho...er.pyi
windows11-21h2-x64
3Data/Pytho...le.pyi
windows11-21h2-x64
3Data/Pytho...__.pyi
windows11-21h2-x64
3Data/Pytho...ay.pyi
windows11-21h2-x64
3Data/Pytho...hack.c
windows11-21h2-x64
3Data/Pytho...__.pyi
windows11-21h2-x64
3Data/Pytho...ft.pyi
windows11-21h2-x64
3Data/Pytho...er.pyi
windows11-21h2-x64
3Data/Pytho...__.pyi
windows11-21h2-x64
3Data/Pytho...on.pyi
windows11-21h2-x64
3Data/Pytho...ad.pyi
windows11-21h2-x64
3Data/Pytho...ps.pyi
windows11-21h2-x64
3Data/Pytho...or.pyi
windows11-21h2-x64
3Data/Pytho...at.pyi
windows11-21h2-x64
3Data/Pytho...se.pyi
windows11-21h2-x64
3Data/Pytho...ms.pyi
windows11-21h2-x64
3Data/Pytho...ks.pyi
windows11-21h2-x64
3Data/Pytho...se.pyi
windows11-21h2-x64
3Data/Pytho...ce.pyc
windows11-21h2-x64
3Data/Pytho...ad.pyc
windows11-21h2-x64
3Data/Pytho...at.pyc
windows11-21h2-x64
3Data/Pytho...ay.pyc
windows11-21h2-x64
3Data/Pytho...__.pyc
windows11-21h2-x64
3Data/Pytho...32.dll
windows11-21h2-x64
3Analysis
-
max time kernel
3s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
18-08-2024 14:52
Static task
static1
Behavioral task
behavioral1
Sample
Minecraft.Note.Block.Studio.exe
Resource
win11-20240802-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11-20240802-en
Behavioral task
behavioral4
Sample
Data/Python/Lib/site-packages.zip
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
Data/Python/Lib/site-packages/numpy/LICENSE.txt
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
Data/Python/Lib/site-packages/numpy/__init__.cython-30.pxd
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
Data/Python/Lib/site-packages/numpy/__init__.pxd
Resource
win11-20240802-en
Behavioral task
behavioral8
Sample
Data/Python/Lib/site-packages/numpy/__init__.pyi
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
Data/Python/Lib/site-packages/numpy/_pytesttester.pyi
Resource
win11-20240802-en
Behavioral task
behavioral10
Sample
Data/Python/Lib/site-packages/numpy/_typing/_callable.pyi
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
Data/Python/Lib/site-packages/numpy/core/__init__.pyi
Resource
win11-20240802-en
Behavioral task
behavioral12
Sample
Data/Python/Lib/site-packages/numpy/core/_asarray.pyi
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
Data/Python/Lib/site-packages/numpy/distutils/mingw/gfortran_vs2003_hack.c
Resource
win11-20240802-en
Behavioral task
behavioral14
Sample
Data/Python/Lib/site-packages/numpy/fft/__init__.pyi
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
Data/Python/Lib/site-packages/numpy/fft/_pocketfft.pyi
Resource
win11-20240802-en
Behavioral task
behavioral16
Sample
Data/Python/Lib/site-packages/numpy/fft/helper.pyi
Resource
win11-20240802-en
Behavioral task
behavioral17
Sample
Data/Python/Lib/site-packages/numpy/lib/__init__.pyi
Resource
win11-20240802-en
Behavioral task
behavioral18
Sample
Data/Python/Lib/site-packages/numpy/lib/_version.pyi
Resource
win11-20240802-en
Behavioral task
behavioral19
Sample
Data/Python/Lib/site-packages/numpy/lib/arraypad.pyi
Resource
win11-20240802-en
Behavioral task
behavioral20
Sample
Data/Python/Lib/site-packages/numpy/lib/arraysetops.pyi
Resource
win11-20240802-en
Behavioral task
behavioral21
Sample
Data/Python/Lib/site-packages/numpy/lib/arrayterator.pyi
Resource
win11-20240802-en
Behavioral task
behavioral22
Sample
Data/Python/Lib/site-packages/numpy/lib/format.pyi
Resource
win11-20240802-en
Behavioral task
behavioral23
Sample
Data/Python/Lib/site-packages/numpy/lib/function_base.pyi
Resource
win11-20240802-en
Behavioral task
behavioral24
Sample
Data/Python/Lib/site-packages/numpy/lib/histograms.pyi
Resource
win11-20240802-en
Behavioral task
behavioral25
Sample
Data/Python/Lib/site-packages/numpy/lib/index_tricks.pyi
Resource
win11-20240802-en
Behavioral task
behavioral26
Sample
Data/Python/Lib/site-packages/numpy/lib/shape_base.pyi
Resource
win11-20240802-en
Behavioral task
behavioral27
Sample
Data/Python/Lib/site-packages/numpy/lib/tests/test__datasource.pyc
Resource
win11-20240802-en
Behavioral task
behavioral28
Sample
Data/Python/Lib/site-packages/numpy/lib/tests/test_arraypad.pyc
Resource
win11-20240802-en
Behavioral task
behavioral29
Sample
Data/Python/Lib/site-packages/numpy/lib/tests/test_format.pyc
Resource
win11-20240802-en
Behavioral task
behavioral30
Sample
Data/Python/Lib/site-packages/numpy/lib/user_array.pyc
Resource
win11-20240802-en
Behavioral task
behavioral31
Sample
Data/Python/Lib/site-packages/numpy/linalg/__init__.pyc
Resource
win11-20240802-en
Behavioral task
behavioral32
Sample
Data/Python/Lib/site-packages/numpy/linalg/_umath_linalg.cp38-win32.dll
Resource
win11-20240802-en
General
-
Target
Minecraft.Note.Block.Studio.exe
-
Size
42.9MB
-
MD5
cad7ed3f0e24ed9d0c642a8db5711b6a
-
SHA1
526f38aeb0aac98e8dc834af594cba5210555407
-
SHA256
d49877b56eae195a92a251b8a2323f9271c5d1258c8671d26e03ee44425c0478
-
SHA512
21d07a10d13cc95ddaadbb7ed3045030c33cff6759af0f091e9058ae1c1b40dabf5ed1add13f62471feb19f3e1b52bd93246cd1b01ff9059aa32d1abd1e2597b
-
SSDEEP
786432:SeCSW3HLvaImZhgT3s6T/STneTZxcmpMmQO9KWNMurqQVbw+Dw3X6cM:eSC/mz8sEsMemWm/EW6u9bwnU
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Minecraft.Note.Block.Studio.exe