8a57aa6477fb83df5b4cc1999aa5e98e8380632e38ccad28ffbc922bc6bdfedd

Sharing

Copy URL

Twitter E-mail

General

Target

BedrockLauncher2024.8.26.28.zip
Size

53.0MB
Sample

240906-zcckvswgkn
MD5

5349f41476301fef490cf7c42a4d2a37
SHA1

3dc16dfa2c2ed0d7789e059af099efa906142189
SHA256

8a57aa6477fb83df5b4cc1999aa5e98e8380632e38ccad28ffbc922bc6bdfedd
SHA512

6e267edb02b27f347969f74cd87594b2bb4944af89882c37b28d8cad92ef5ad97c0cdfd6a036e27ae2f44284b15e8c78a01ed499e22f4ccda4b0f60bb6f5846d
SSDEEP

1572864:plncbCOTAtKgoOqo0rYL1u0Oa09PrjnCClny+l2:vnsctKgZfHu0+FvRlyh

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  BedrockLauncher2024.8.26.28.zip
- Size
  
  53.0MB
- MD5
  
  5349f41476301fef490cf7c42a4d2a37
- SHA1
  
  3dc16dfa2c2ed0d7789e059af099efa906142189
- SHA256
  
  8a57aa6477fb83df5b4cc1999aa5e98e8380632e38ccad28ffbc922bc6bdfedd
- SHA512
  
  6e267edb02b27f347969f74cd87594b2bb4944af89882c37b28d8cad92ef5ad97c0cdfd6a036e27ae2f44284b15e8c78a01ed499e22f4ccda4b0f60bb6f5846d
- SSDEEP
  
  1572864:plncbCOTAtKgoOqo0rYL1u0Oa09PrjnCClny+l2:vnsctKgZfHu0+FvRlyh
Score

6^/10

discovery
- Legitimate hosting services abused for malware hosting/C2
behavioral1
- Target
  
  BedrockLauncher/app/BedrockLauncher.UpdateProcessor.dll
- Size
  
  228KB
- MD5
  
  62971d2eff9826db4add14dd59a8c7b2
- SHA1
  
  82d06680ab54b1d81b271ee24c5e8d8dcfb9cb56
- SHA256
  
  7e0c63e9ecc338b4ecbc94a307a09be883007fc8fddefec9c3c3cd3b1ec6aa9c
- SHA512
  
  2191763da4fcf57b672ab0ca171ca59eae01b797965910212a7622f888a5f2e682d9930318a0bec0f0338fdc4d99a98da93d78adbbd33ecc0596cfb876eb120e
- SSDEEP
  
  3072:GWRImXEvATmp+aatI0/GnMJ/E4BamkyqXByeWUhqRHNh3L27fQhdyijXB8E:TI9vATmFatI0+zeang7Rth3GfQhljXB
Score

1^/10
behavioral2
- Target
  
  BedrockLauncher/app/BedrockLauncher.dll
- Size
  
  54.7MB
- MD5
  
  546addd6ccd644ee047f0bb69348e93d
- SHA1
  
  f85f3c388b212903ae8b6f6c1ace9dae106fb1f3
- SHA256
  
  697d248dce222990b1eba3e8506b307848ba8cec869a75cd5c30a94cab8a3148
- SHA512
  
  4cd6856f1fa5d6b6e58cb9ff5ffecaa2a67751eb7110a729a5f5f0f9fbb9faed6a88c2b855cb725dd13b67141e14f347e4ba52f08548b8d2755ee6777c33636b
- SSDEEP
  
  786432:kaNyvf6wYXyzmn/VmiioMtlcLgTxgKrG1mAFpWASo7DfFqF9gPxanB3Z5vLxBFJu:kafyc/VviFVTuK6FFpV2LxjDxjI6kt
Score

1^/10
behavioral3
- Target
  
  BedrockLauncher/app/BedrockLauncher.exe
- Size
  
  317KB
- MD5
  
  7eeaf742691a5714275c3852ba7e32b5
- SHA1
  
  e9ba51847cec2d415726e4a58f0e2950e778b19d
- SHA256
  
  93499c314c35843edf0d0f01e5648f4442ef4f8e3b4c5952130ade484489dd96
- SHA512
  
  34eefab38b06df5b7dbacea5eaf185c5de2139ed5a9780dc9557f766a7dc1bf32580c25803155bed38bd691a4fd013365bd21a320f519dba310e35d1a2c016d4
- SSDEEP
  
  6144:tBKjK2LFzZNf+UL8SiQKKgKKKKbKKKKKKoKKKKKKKK3KKKKKKKKKZKKKKKKKKOKC:tMjnNfR
Score

8^/10
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral4
- Target
  
  BedrockLauncher/app/CodeHollow.FeedReader.dll
- Size
  
  67KB
- MD5
  
  8412db5be196391b3a6adea1217c3038
- SHA1
  
  3c2568727237dda71d5990fa0da8dfd5c4e255f0
- SHA256
  
  7c22a5f21416885facfcd29cccb2c3fd802f4ddd2ea49ae8884f44cad21cc8d3
- SHA512
  
  360d2367f55219bbcf140acffaaff68a3edc78c055fb9df50afbee0dd999f7d672be01433ad7fd897d4d4740ccb7a1a6c4910db84d2331ed027898514338fd78
- SSDEEP
  
  768:d+oJmalgtlFD2kSqNbadlLquFCm3yQG89L9kL1BysrQw/BSdk037TZhLPYhBjjh:coJhXWel+EZXGAhAjysEBdk03nZRYzh
Score

1^/10
behavioral5
- Target
  
  BedrockLauncher/app/FolderBrowserEx.dll
- Size
  
  12KB
- MD5
  
  99a36a3aa4a12a7640d931a63138487a
- SHA1
  
  7a01eb7a8ede0b839dae215f8ed58e7f3a4f83c9
- SHA256
  
  b51a8b252e106f9968f5b22b4cc417c30b6f28a6592ff204b9ff8b4cb8a7059b
- SHA512
  
  0dd8c120f92e28f5c72999c46e6422c170b0f407c253defdf20c08c76af6cee9f063871cb2b194bec32dbea1699c7643976f156f33394395bfd18bd50bbaf604
- SSDEEP
  
  192:7Ct98C7y69yycn9S+t0c0NffjBacfi8ScRYo+0fVXGe0aVh+i92dFn:GtNO9ficKfVpfigV++VXbJVUo2dFn
Score

1^/10
behavioral6
- Target
  
  BedrockLauncher/app/HtmlAgilityPack.dll
- Size
  
  160KB
- MD5
  
  b0db1b294401a6a17fe5da10eb213016
- SHA1
  
  31623d716f78263bdc10b9eef9621d76e0fbd7e4
- SHA256
  
  afeb8a4ce21886420e84c1298463148ee7238eb9f9c39d7e825086b350c838c8
- SHA512
  
  b5a214ebb653c7f2272e2b99e422e1befc30a4f45a5798755445f604f397503b38833ae72969f4ed4403f2876445fc087630a118bc6cb4f1daff061a3a7d1d8a
- SSDEEP
  
  3072:7yE83bT8+mdPppDySq6kJ/iAt3C8qZh8YGFPZeBLvV:7kX81dPppDySq6kN7o
Score

1^/10
behavioral7
- Target
  
  BedrockLauncher/app/HtmlRenderer.Core.dll
- Size
  
  245KB
- MD5
  
  99b1e650d6cb095d68db2e60ff20f29d
- SHA1
  
  91f27922e103d72051a2200a7450b72368b2005a
- SHA256
  
  5a01ebbfed29ae69dd0a0b91a282f5e179b149665ab0d6e2421b4c5e99a5470f
- SHA512
  
  b7e3121bc94b6a2c25afa3a4df8c193df0fe21da163a3c88ab92ca8672a31a3e04af1accc8fae0d719ebc4853988bcc2a9beab508f1e83de453cf3e4a467acb0
- SSDEEP
  
  3072:8pZznFviTxGSiKCXz2JDecralXQvz+zQleHm2BLjqXIkBQnVjJv767nVjJv76YJl:6Zz4xGS1u2palACfncbJ0
Score

1^/10
behavioral8
- Target
  
  BedrockLauncher/app/HtmlRenderer.WPF.dll
- Size
  
  49KB
- MD5
  
  ac33e2a193b178dd0b534f914e2513f3
- SHA1
  
  c3f152d120f7871fdff54cdd5ebb8e02185693ef
- SHA256
  
  a2a499049ee9de513346ca72f631f9da6fae8f3b5b0f43bb1c941f2164fb7161
- SHA512
  
  f48224683760ade7b4b8c3bba61c560c2d272dc67c82536942970c9d44d5cb1bca429ca366421c0860cae99f8171c1e31e5d337e0980a9bc53571dc5df8949fc
- SSDEEP
  
  1536:zbxOEHciUqqVbGcsip84urrg/TM9GMUujpBlCXZkc:zbxOEDqWrEXqc
Score

1^/10
behavioral9
- Target
  
  BedrockLauncher/app/ICSharpCode.AvalonEdit.dll
- Size
  
  602KB
- MD5
  
  7ca104c3e98d3cbd162fdef84edd3b8f
- SHA1
  
  d33e18462f8fefc374fb2ce286d2e176bf414bab
- SHA256
  
  2417e116ed23b3cb7ded9759bdf7dbdcfae0f7d58d71b1dd5e264f5510d3eea1
- SHA512
  
  23aaf202b7e50e5b621bbbf720214f2732ab4013dc34c12f0cc9dcca51c0afdcb0f1a696c425449767c49aafa4e834b8e4ee03c0fe48664d37a3b3ba07a3f4c8
- SSDEEP
  
  6144:TkAkAepj9cKU7RrHLF+UpC5Heq4h2Eoj51+8isj3V+oCiTfWAqjot:fs9Hh48GL
Score

1^/10
behavioral10
- Target
  
  BedrockLauncher/app/IniParser.dll
- Size
  
  32KB
- MD5
  
  30cb27e43984f73bea4b9a6207ca808a
- SHA1
  
  cb6572541b8b1b0550c05afe1903ed60d5033ae0
- SHA256
  
  ab891220ae23e63eb58b0cb7220b38a5776f42d757e4d9acb4122a562046a7b1
- SHA512
  
  d3eba7fb92dac0f1daac2183003ef07eebd17fd4f1d3ed73b7ce910720ce0a59c9dd61a824d3a37aa98b59bb4394f116420e7bee52f6288e5599bab982baa23c
- SSDEEP
  
  768:/K321VpGkga918fAaaEPX7lrlkJouKuGT:/+21fUAaaEPX7FdT
Score

1^/10
behavioral11
- Target
  
  BedrockLauncher/app/JemExtensions.dll
- Size
  
  39KB
- MD5
  
  90d271c9acaa28666d06c01031c9033b
- SHA1
  
  66e470b33b855676f7a2b5f0ba76d3ef922dfef2
- SHA256
  
  dc4f22f04fcd7acd5846b02fb953a550319dc3f04f8f18b65a54d4b3e2029f23
- SHA512
  
  134203f02d9168ea9a5797cef36ab39462023d917a8590d22281bd8c98bb337dc023a6292181a3c1638e266e6ba7eff632d13cfa7ef79222167e21cceb9bfd5e
- SSDEEP
  
  768:NFfcNdNzS0IYvvWWoK+LHmjeyo00PtV5Efdx1VmZzSAsfUJn:NKNdNzSF2TjYtfEfRV82dcn
Score

1^/10
behavioral12
- Target
  
  BedrockLauncher/app/Markdig.dll
- Size
  
  451KB
- MD5
  
  3faa3f1acd4cb9bee4f8d8b851d9adb5
- SHA1
  
  8927999edbbb76da357c0799c72d032670c96dfc
- SHA256
  
  fea2a13a8d996e449de7a8f8e6a502506611c813274747660e459f65f2c929ea
- SHA512
  
  47a858abc1670e8682cd115066dd8c1eec5d214e3913e5fb8f4e1f8689fb11b1ae6449d8426cbbed2b8c6c19a4b377b5fcb5dcf82726ebe5857014c15dbc3d29
- SSDEEP
  
  6144:eDFt5VXBLpTmYOOtMWEcAeSH7xGbKL6MZlOPrOJwSin4aecR7ayOvAaniUV1PIYQ:eDFnRMWEcAeS7xEKLnJwScecJaGBgy
Score

1^/10
behavioral13
- Target
  
  BedrockLauncher/app/MdXaml.dll
- Size
  
  109KB
- MD5
  
  e392fdf148951c49785bf27913a1bd97
- SHA1
  
  48ef702270ac49b40e1e5b2eb0cb28e7764b3589
- SHA256
  
  582ffec9d3a7d10f80b40755a9322f01fb6708e51a09f851c498bdbc181cee58
- SHA512
  
  c4f0fc91b5b8a34be219634bca4d88c2f33a775b0d380398f83297f01720c02810b589ffce7915e8020a84b5d0bf713fe2605b373bbe69f1e3051d07506e0a33
- SSDEEP
  
  1536:4dnBkN527Nf8Sw+/4vsdjmN+c+uX5Z1d97WWhlyXx/rKoQq7xT8oV7ozT8TKMPP0:OBkN0wM4v1NjNWWhcXxr/TK508
Score

1^/10
behavioral14
- Target
  
  BedrockLauncher/app/Microsoft.Windows.SDK.NET.dll
- Size
  
  19.6MB
- MD5
  
  b611eb7b955788b0a1b423f85e964960
- SHA1
  
  7c782e6ec1cacf99a5d1b905965c92ae48736df9
- SHA256
  
  40c8981d586a9eae06a57adf56986481c6880099d407f80d6d36f701eb7a0820
- SHA512
  
  7ded5a471c5de577030454f1b0bc57b4a4b59bce76e99acdbdfad389af058efbeb8cf66ee67cfb027f43098d11253df35f317e2fe7f669ac0da2bc19285545aa
- SSDEEP
  
  196608:H3KSSL4KbC4sjqZw5vZBxxAUILNCvGA2B7r7N:Hy4Ms5ZBINOGAerN
Score

1^/10
behavioral15
- Target
  
  BedrockLauncher/app/Microsoft.Xaml.Behaviors.dll
- Size
  
  141KB
- MD5
  
  72f8adb8af71cf55ae3fa13afc72e877
- SHA1
  
  620b3c526997ae0d07171f14555ed22d58ee3639
- SHA256
  
  8f782ad7adfdeeaa933183065aa7a0be9387abce6038e912455e78527b04adca
- SHA512
  
  c0d73400b9e55952c1a70b844bdf3fecdd8fc55e3a9920c7f9a30e8def372422dadb2bb716570769037bae98d930c6bd50226f3ba3c255b823edbd67bc429c63
- SSDEEP
  
  3072:wXQg6pDJRt4vs+uWRx8kt1dLXTiGmad5rUj9yV:OQD1JRtiWfGTV
Score

1^/10
behavioral16
- Target
  
  BedrockLauncher/app/MimeMapping.dll
- Size
  
  241KB
- MD5
  
  2aa0993d4f001d51115461e164c9763b
- SHA1
  
  e892e9df3d2cca6aabece596a44c1ffd3393079b
- SHA256
  
  3ad1ad73e176643241580d6077dd67c99d83a8c4b21dbc9c4c03bb72c22a501f
- SHA512
  
  ccbf184d8773c4ca30eeb968e53fbb5670bc7a1a5ab049ebaa8f1ecb56403a70cf0985692107cd7c18c443eaa0fb17b56cfa61ab44b61172b69eeafc9116a892
- SSDEEP
  
  6144:/BYpJqT2vOD05USyyheZAS4Dxn7HbqMXZq:ypgamw5U2hec77
Score

3^/10

discovery
behavioral17
- Target
  
  BedrockLauncher/app/NLog.dll
- Size
  
  810KB
- MD5
  
  36dd3bdccafafc36e9497b2edbe63112
- SHA1
  
  1873f604bd76adff9c24f2f09df0189cd8d9e2f9
- SHA256
  
  9a57fb30f1332bcf40ca727a42c98e36dc6656624e12175aa61cb6d1709ee7ea
- SHA512
  
  02a11967ea3b94e4bef535a8fa0542c42f36de1eda7c64d8a170daeb9835e803118f40daa147c6f00eff7cf4e9934b21b0c93f47106149b12436e13c224e2c9f
- SSDEEP
  
  24576:BZhH575vJb5HRT/oPGPBpzZoKrWrecNM5EgGVfp0:HhH575vJb5HRT/Dwfp
Score

1^/10
behavioral18
- Target
  
  BedrockLauncher/app/NLogViewer.dll
- Size
  
  175KB
- MD5
  
  b323aa730077d72fcc622be41904e1e2
- SHA1
  
  4e2fd60a365f9c12f41ef18898ab088484463ee0
- SHA256
  
  e56d51bc62a3ecbe8cc5a33a0a1fa84110620f06738460e1a266cef107aec6cd
- SHA512
  
  3525f3b1d301fdb70b26824709f84959c7e29aae00647bdf4a9a0163357174759e940cced0d768af9aaf10645b8d8e36634f0cd068f1576439fa2f83670c9ac7
- SSDEEP
  
  3072:lW4bGg0/xXVhlOaVzwbQzT4R/MUon/8tu4bHTzP17YB:BbGtrl5zwgT4RwCTbzh7Y
Score

1^/10
behavioral19
- Target
  
  BedrockLauncher/app/Newtonsoft.Json.dll
- Size
  
  679KB
- MD5
  
  916d32b899f1bc23b209648d007b99fd
- SHA1
  
  e3673d05d46f29e68241d4536bddf18cdd0a913d
- SHA256
  
  72cf291d4bab0edd08a9b07c6173e1e7ad1abb7ab727fd7044bf6305d7515661
- SHA512
  
  60bd2693daa42637f8ae6d6460c3013c87f46f28e9b0dbf9d7f6764703b904a7c8c22e30b4ba13f1f23f6cbee7d9640ee3821c48110e67440f237c2bb2ee5eb6
- SSDEEP
  
  12288:1eos/POdGV5jfWrV/9Yeh9eRcyLfLYtT5mWxTZ/B7jW5JMtRRpKzQk:10/POdGV5jfW5VnhFyvOB7jW5JMty
Score

1^/10
behavioral20
- Target
  
  BedrockLauncher/app/PostSharp.Patterns.Aggregation.dll
- Size
  
  98KB
- MD5
  
  395f8438d22f08fb9a583b70857122b4
- SHA1
  
  9e79b396ce70a797d06e20a9da8d75bb5a090f87
- SHA256
  
  367cc7c0096e153196d81a9f1a7110f438b6cce66f2b55b9dab34a5b3e4be971
- SHA512
  
  52dfc6eca8c8a7d9dd5bf31a132289f529a1f89593fa462abd7af7bc874f90020900ce3c3acaff41b4a280776f2805bd1c53e108bcebbe454e86458af43e62ca
- SSDEEP
  
  1536:olo9EGhGdKGqZgjEek5abFfIaaNeTi+RAIWTD7WACm8t3hSj:ohYYGgjV1H6efAttj
Score

1^/10
behavioral21
- Target
  
  BedrockLauncher/app/PostSharp.Patterns.Common.dll
- Size
  
  402KB
- MD5
  
  8ee040f4735f8dbaeec394a2860572cd
- SHA1
  
  ef958e933c3110d87b94667e06466c221fe2ed26
- SHA256
  
  e0226c3cc2c77b1efeeb10fcd7da8076c8509476beb2b4624a6a91bcebf9a350
- SHA512
  
  1d179de56352f82931bc506487641c4f175a8af04d6ad92d9f188325e858be96c16385ae9c40a397ead5d4e6b6aff50e2a453c1b4ced30bd27b4eb6d58794933
- SSDEEP
  
  3072:5Ldk9E+jDJE+DC9wizUVw/MwMIymOYVS6a83DodaMW1axBq5aEZfSeyXd8jCmfI5:FdEDJBk5z6wkwgmkPgMW28TeV5Ifu3
Score

1^/10
behavioral22
- Target
  
  BedrockLauncher/app/PostSharp.Patterns.Model.dll
- Size
  
  235KB
- MD5
  
  33153878b33ccabc5ba1cac9479b7294
- SHA1
  
  57248c40449e509d3ce5a887204d0e85d32d5acf
- SHA256
  
  20c7e8e6cedb4efccae38839efe7de7a21b2d76189e2403bb167c3b6a9c568fe
- SHA512
  
  acf150e7e38b2770b8579b245deb55c9c6008c93738cf67989e58afc4c6e52b58b486ce33d2cde721e2c30351fcf2e13cb40dfd6fef3ed99d538b47e6ff7bcdc
- SSDEEP
  
  3072:ou2n9GiDDetjs0ZXatHZYvXo4OT/Rvp5CDgYIvbbgq2nk2+3G0:YDDM9EuXoR/BCDMbbgq2n70
Score

1^/10
behavioral23
- Target
  
  BedrockLauncher/app/PostSharp.dll
- Size
  
  243KB
- MD5
  
  32464c2fbf36eff9952187220f7140b0
- SHA1
  
  e630c98f14b2df36a0e3a7a623950b123971cb9c
- SHA256
  
  42e71c5e69d890b536850166449d52967d3c568e1ac380bfd41eaa5e648e69b9
- SHA512
  
  66ec76ea5dbaacbd7b097e2b59389d5ec54d88d440e2cc498a799eb8ed29b1b5c4b2f08a7eb9d38db5244fdcf7da42e610212e6b6fc1e27566be79eeae4b8ee9
- SSDEEP
  
  3072:lyGut4OtkAzUJA17ev9k46TD3/Uhvm92JqrmZOOqzR1i5v+40qcslQX6HMFsLja3:Pq4mF8ByLJnzHi5v+VC6qVjxYvjoXEN
Score

1^/10
behavioral24
- Target
  
  BedrockLauncher/app/RestSharp.dll
- Size
  
  130KB
- MD5
  
  336cb326bcf8112b6e32bc530efa2f65
- SHA1
  
  f6e7da557c1f0a87562f20fc73adad0e86f14a0b
- SHA256
  
  a4ed9101624981d1b96ae78a7c115135163ebc89aa3f79456743e269b0bc770d
- SHA512
  
  05f8243adf3e5d38aacafedf2c72f5e3505dc2ab81d262e1f93c1b9cdb194f9776e00b3bf1412cba6aae37d3ee7cb2f885121e7f5df84fd3cf62880dbc54faa1
- SSDEEP
  
  3072:gRDvtQ39XKrdJOHdhi9F0P4aQN9B9uvtYrKsmeiktw:kvtQtXK2I30T6zt
Score

1^/10
behavioral25
- Target
  
  BedrockLauncher/app/Semver.dll
- Size
  
  10KB
- MD5
  
  03bf9d6573894e8a166f09e70543f189
- SHA1
  
  3293b3eecfdadebf9d74799bf80de766c3d120e7
- SHA256
  
  95bb88b00b7b48014a47cf3488c1dc5466d5b1ba51e1e949e7dec0fd81ac9b3f
- SHA512
  
  0a90ff163d3beb4f9786cb66760a3a0ee3d647b4f072cfa414346cde862014bbd6c1119b26de7d9dc3a82420aa1ca5260ed563c868d66a01bb1aa9673df0ae8c
- SSDEEP
  
  96:pQFhUmlabc4NXvmwiIub6kCEgPAca/v6TTQ6rkvqdskcqme54CywBQCvTCpAEQGL:iTab9N/qg4fyfZSusJ64M677ZNAe
Score

1^/10
behavioral26
- Target
  
  BedrockLauncher/app/SymbolicLinkSupport.dll
- Size
  
  9KB
- MD5
  
  0bb63b6ebe8bb86ebcdcd414fc0ca249
- SHA1
  
  e3b458241ac61e41453b23c1f122696cab7cd610
- SHA256
  
  7672958fd45fae5ac84c19c3648d554fb4fe26a5b268563c0629ac3c1a871bac
- SHA512
  
  88d33ddcaf03b833679b3228c73dc227386875a8470f314dc779444992d1f745527d58bf1e2c35f4142232c338e9d57171dce0e7e0a695cfdcf0c03342f5f3db
- SSDEEP
  
  192:4YwZmvZQviSZzqY1xDycKGiTOs8qNERO1+gzFbTOfvLWy:MhZz5vKGkZ8qNapgzFXOfvLWy
Score

1^/10
behavioral27
- Target
  
  BedrockLauncher/app/nlog.config
- Size
  
  587B
- MD5
  
  4047f7d8ee478edb955bd15928824b04
- SHA1
  
  f0ec207a21ea6ffb6e22fbe14676305e2e72e0fc
- SHA256
  
  3500f12a32bb1ad687e4599a1abc5cba92ee5048ceb58cc615e884c9dd79b0ac
- SHA512
  
  d1fab826263ccf4922d511d561d01521865ee3d441bc4eaa6659c96677b436a447676dc15be4abf18aece6271233dd12b1e5b299ce59d5e529497795d093ddde
Score

3^/10
behavioral28
- Target
  
  BedrockLauncher/app/runtimes/win-x64/BedrockLauncher.TokenBroker.exp
- Size
  
  1KB
- MD5
  
  bc411ce95fd6b4aa8bf6d65aa51083f6
- SHA1
  
  50f22578e7c0ac1c6440284889e224d0cd8c0b9f
- SHA256
  
  753a8cec2370447082b2fb373e5557e4366574c3dd8aac682ded1a57e590e9c3
- SHA512
  
  271219a3dd8702735fd23f5807d726f18a933f003e7d0fd705adb92af63147180e2c885d0d9ac8fb1399194e9342ebffe2412e62db19cd5064deac71498a3d4e
Score

3^/10
behavioral29
- Target
  
  BedrockLauncher/app/runtimes/win-x64/BedrockLauncher.TokenBroker.lib
- Size
  
  3KB
- MD5
  
  22e0e2b5ad76462fb3e60a5c584d3f24
- SHA1
  
  f5b74f347646abff485606e6f8b7d8b0de3338a6
- SHA256
  
  4b75285b8bb1a06ebdc1b229d5fca298d3e7950626a594d98703a27fbd87b166
- SHA512
  
  e560b3778cafc5b407cffee7b0e333bdd30f6b045c543fc3628b67db9c92604a0f25b2ca9ecc69133e8a107cd9629c49f098d68fbaa52df1fb8c07fda362a7a2
Score

3^/10
behavioral30
- Target
  
  BedrockLauncher/app/runtimes/win-x86/BedrockLauncher.TokenBroker.exp
- Size
  
  1KB
- MD5
  
  41ef6a9232d2aece9102e3426a3ab364
- SHA1
  
  38e60a23718c8a6f62de9c26224b7f1aac12abb2
- SHA256
  
  615951da65914b62e803dcd49ef661fe26d8aeb442be98f66bdafd4929c2d7bf
- SHA512
  
  c97d968e76a84e744f0af9bbe21aa1b77a1b50287b131e79ca00709aed38aca702ae253261db8d2c576c0f3dde6491ece3c9ee6d195f3399b61a06c6c4a5ffe2
Score

3^/10
behavioral31
- Target
  
  BedrockLauncher/app/runtimes/win-x86/BedrockLauncher.TokenBroker.lib
- Size
  
  3KB
- MD5
  
  45d60d2cdee9ea6383059fa4c3a36f31
- SHA1
  
  8cb2427d11fd201a96b2c472b933b3a156603b34
- SHA256
  
  8a21dcc7a20c32c1b389562f5489957b4e3b90ac29d8f4679c5935dfdbcc4ca2
- SHA512
  
  ff18540d63c1c43dbfb6893526f05b2c03472a00b307746dc80df68836fbafa38671981c0919461a6c3d013ac5141991e665304a1449d27e3ca4cd0fb7344ad9
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Legitimate hosting services abused for malware hosting/C2

Downloads MZ/PE file

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32