Analysis
-
max time kernel
1207s -
max time network
1164s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
16-11-2024 16:55
Static task
static1
Behavioral task
behavioral1
Sample
MinecraftInstaller.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MinecraftInstaller.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
MinecraftInstaller.exe
Resource
macos-20241101-en
General
-
Target
MinecraftInstaller.exe
-
Size
32.3MB
-
MD5
4f02ac057355b5dc73ea28aecd2d56b4
-
SHA1
32591cb75779a3e308a44e75a76f821e7dee11e0
-
SHA256
83a5f942b2a15eab4826ef1709ec6a7f9637a7ec0fce16585776848797307fa4
-
SHA512
9eb08f85559df6af9192bec8904097d4e43a832ba9e9cc1c7be1a366af8d103c3a6db3886f00927ae5eb62055fbc770c7b5a3d2a122a0b460b51136083015368
-
SSDEEP
393216:nbekuyo9nMK50UGRXLePuq2ZWy/c5zFviMKe2OHmwv9CsTmsueFFza9ye:6Zn/G4Gqk1cWe2iTVCMue3E
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
MinecraftInstaller.exedescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MinecraftInstaller.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
MinecraftInstaller.exedescription pid Process Token: SeDebugPrivilege 4316 MinecraftInstaller.exe