21dfe7581e881ecf00f91dc99431b67540d5908b5b92aaed6fa3fd1a4e33f525

Resubmissions

17/04/2026, 17:49

17/04/2026, 17:46

user interaction
yes
max time kernel
1s
max time network
140s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260126-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260126-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
17/04/2026, 17:49

Target
UniCraft_Launcher-2.4.2.appimage
Size 114.2MB
Sample260417-wef5aaew2r
SHA256 21dfe7581e881ecf00f91dc99431b67540d5908b5b92aaed6fa3fd1a4e33f525
MD5 3f04a677621d9b6b729bba48d1c6a7b5
SHA1 4d70628f7c7f9959c2364debcf1fbbb026c48266
SHA512 e5d990fc1d45a9de94b70274c691cb8cc44e8ef4ea045815178996149983540e7a1b37c13e8c8da16b5c1fa9ec629c14a78bfc4873fd240b24b036ef8249aaee
SSDEEP 3145728:i3s289AG9CIcaZbf1SiDac6re6HrAdjLXH0StUaPkqwZ:ic289JUIcobdSiDnSeWrAFLEAUOkfZ
TLSH
T13A48337B2F9A8BCFD29BC17AD585C1396916E0B90BF18C97562E84813F4F90ADD0F601
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	unicraft-launcher	1522	unicraft-launcher

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	UniCraft_Launcher-2.4.2.appimage
File opened for reading	/proc/filesystems	unicraft-launcher

/tmp/UniCraft_Launcher-2.4.2.appimage
/tmp/UniCraft_Launcher-2.4.2.appimage
1⤵
- Reads runtime system information
PID:1522

/tmp/.mount_UniCraT4WiyZ/AppRun
/tmp/UniCraft_Launcher-2.4.2.appimage
1⤵
PID:1522