7d5a61729f22d2a478fdc34e21e6fd4a114388b28235ca34375349ce933a27ea

Sharing

Copy URL Twitter E-mail

General

Target
NetherPack_2.0_1.16.5.zip
Size 2.3MB
Sample260420-t384vsay5l
SHA256 7d5a61729f22d2a478fdc34e21e6fd4a114388b28235ca34375349ce933a27ea
MD5 cfceb0b902eb4eee1f61f4e1e7f01497
SHA1 e4931f43ca4f7c3bb0f68464283f5735c878f810
SHA512 90d964fe477cc61d77d4f01b7449c13411cb9ec79b5c2161ad2c7b9ab76ccfee9325172c1afc10bf8377dc3769681af6b16e8aa2f87fb6edb053022e0a82fcb4
SSDEEP 49152:a+ESnBMNcUCvRxZfhT0tZjNzxFVWJp7sWHOYN7MlfBKEJ4MuPLtSpAsLgZ1kWzA3:P1qN8VhQrNVza7syOc7MlfBKEJ4MuPLk
TLSH
T1F0B5F1A9D737AD90D59FAE3A04BB1193F864863A5818F3FF613890567FCEDD00116A32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  NetherPack_2.0_1.16.5.zip
- Size 2.3MB
- SHA256 7d5a61729f22d2a478fdc34e21e6fd4a114388b28235ca34375349ce933a27ea
- MD5 cfceb0b902eb4eee1f61f4e1e7f01497
- SHA1 e4931f43ca4f7c3bb0f68464283f5735c878f810
- SHA512 90d964fe477cc61d77d4f01b7449c13411cb9ec79b5c2161ad2c7b9ab76ccfee9325172c1afc10bf8377dc3769681af6b16e8aa2f87fb6edb053022e0a82fcb4
- SSDEEP 49152:a+ESnBMNcUCvRxZfhT0tZjNzxFVWJp7sWHOYN7MlfBKEJ4MuPLtSpAsLgZ1kWzA3:P1qN8VhQrNVza7syOc7MlfBKEJ4MuPLk
- TLSH
  T1F0B5F1A9D737AD90D59FAE3A04BB1193F864863A5818F3FF613890567FCEDD00116A32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  assets/minecraft/font/glyph_sizes.bin
- Size 64KB
- SHA256 bb6f26f87bfe31a4e107986ecb30d5ac82c656fbbe09df3c8aabbc1c948d0665
- MD5 b3974d56789d3c2df2cdb064088b5f88
- SHA1 a61cd6e8d64be7bba1619a91a2ab271696356923
- SHA512 6d92b0df7df53e3c8236db2b61bc32b69f3f6ea6ac87609206a476521e56d27d8968c5869603c55c258806254a0e0731a11582935bfd701110b2f39741a56642
- SSDEEP 192:CNTR6hAS+8fG3JK/kwnkQiqnfO8+yjDCnJDw6xUaD+6g3Zomt:5hASACfhfCnjSTZt
- TLSH
  T1A4536E818F1EFF2FDA5C5CB8DC6927861748917145F566A8F85D25EE4B2F200324A707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  assets/minecraft/models/item/shield.json
- Size 1KB
- SHA256 690f926486ed24363c70a102db1cccdc1acb483cc42d42b2dc36b6ef894e1c24
- MD5 33038c534506ee9cce58a6644abe81da
- SHA1 98e19abe767715759a599c84052d44ab2a2ba6cd
- SHA512 b3cae2ab3f00b3db27dcaf4220d08e17e621990b9cf12676607aedc2219a9fe86bf00987e0632120391e08856f5c7b38b61c8631cc3a997e759a314d16bf7cd4
- TLSH
  T17B212659CFA14D0E54B7E32B9D754E41F22882A720A6584F3E7C7A4C4F7143907AAF1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  assets/minecraft/models/item/shield_blocking.json
- Size 906B
- SHA256 ef8317c2ff8f2459c3c729d8c47a6a191e6262f4206eb783d032257596520606
- MD5 e6e2d2bd464ff977cae923484a6eb910
- SHA1 abd02d34369042592ba34b5fd61fc6eee570580d
- SHA512 5abb5f2b7f73f11adac105f7650927924c858a778ce40b3c970ed598d51bc714cabca77703faa3ab3c2b91c4f27d0170e385cb920a7d48b6b86c15dcda12e3f7
- TLSH
  T172111299CE504D0E44B7D72BAC751E81F12882AB20AA084E3E3C7A5C0F3543847AAF1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  assets/minecraft/sounds/dig/cloth1.ogg
- Size 5KB
- SHA256 be92a8140b8aab717e23a7979a646a8daabd598ccdbb08949e0cf78069289361
- MD5 6f75a6f9f4259272fe0436e83a1e8390
- SHA1 c91bfbf3c92e24aa783b9e96bf0752db4e897b70
- SHA512 23916169522eba94265fc18172c3504e1edeb34a63846a03cd8e229dbd15d2256c6eda7f9162d7f5e254a3a451988a22310c67766077e11a5daaa2f628d3f926
- SSDEEP 96:cONnv5PmB1zSTOjzwls2n773aAzb7jkA+pzTSQ:hnv5O3iOnwOEFfjRWz2Q
- TLSH
  T17CB10ADC957041AFFC13B1FE205B661603D07AE5B6A03BF39BA5496605F9E45AC7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  assets/minecraft/sounds/dig/cloth2.ogg
- Size 4KB
- SHA256 55800a8e76ba04e2e7bc01785d86cf6ef1c3be1687f55576894faf16bd0f14f0
- MD5 f6a2750e1ed84a42c173f921f4a7a87c
- SHA1 7acfc0f6657637c3507fcae6b094c7a955eecd1f
- SHA512 32d68e77815b3b90875839d4b764c4e9cc2c482d749070b323b05e7414616230d43e2618a8f552ae651b97c80ff732b4275164eda21950013585114d017b739e
- SSDEEP 96:3+ONnv5PmB1zSTOjzwls2n773alJSn6viiU8:3Hnv5O3iOnwOEqJS6i58
- TLSH
  T1B2A118DC99B481BFEC17B2FB304A6A5A03D07EE671603BF7A795487544F9A416C7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  assets/minecraft/sounds/dig/cloth3.ogg
- Size 5KB
- SHA256 ca73c6e22727e69258d97d78a8c4e4c587edb4c0dde6dd70d5c618d9fd5f05f7
- MD5 74b8846a2cb10f45280e5980bad977c2
- SHA1 1b42e4f905d0d0a5d7f107a0298b955b43915e68
- SHA512 44763bdfd8a2c6268d8fa2afbed131fd6082a9774785c9814e98b5d1e1a185cd4d19f451106601249a8065069013c6870ebb63b17077ea7e40dee8205f4d885d
- SSDEEP 96:CvxONnv5PmB1zSTOjzwls2n773aouoWQn/FOK5c:CvSnv5O3iOnwOEpuof/ZW
- TLSH
  T196B11ADC99A540AFFC03B2FB315AB64D03D07AA561603BF79B5A447944FEA422C6405C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  assets/minecraft/sounds/dig/cloth4.ogg
- Size 5KB
- SHA256 be92a8140b8aab717e23a7979a646a8daabd598ccdbb08949e0cf78069289361
- MD5 6f75a6f9f4259272fe0436e83a1e8390
- SHA1 c91bfbf3c92e24aa783b9e96bf0752db4e897b70
- SHA512 23916169522eba94265fc18172c3504e1edeb34a63846a03cd8e229dbd15d2256c6eda7f9162d7f5e254a3a451988a22310c67766077e11a5daaa2f628d3f926
- SSDEEP 96:cONnv5PmB1zSTOjzwls2n773aAzb7jkA+pzTSQ:hnv5O3iOnwOEFfjRWz2Q
- TLSH
  T17CB10ADC957041AFFC13B1FE205B661603D07AE5B6A03BF39BA5496605F9E45AC7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  assets/minecraft/sounds/dig/grass1.ogg
- Size 5KB
- SHA256 be92a8140b8aab717e23a7979a646a8daabd598ccdbb08949e0cf78069289361
- MD5 6f75a6f9f4259272fe0436e83a1e8390
- SHA1 c91bfbf3c92e24aa783b9e96bf0752db4e897b70
- SHA512 23916169522eba94265fc18172c3504e1edeb34a63846a03cd8e229dbd15d2256c6eda7f9162d7f5e254a3a451988a22310c67766077e11a5daaa2f628d3f926
- SSDEEP 96:cONnv5PmB1zSTOjzwls2n773aAzb7jkA+pzTSQ:hnv5O3iOnwOEFfjRWz2Q
- TLSH
  T17CB10ADC957041AFFC13B1FE205B661603D07AE5B6A03BF39BA5496605F9E45AC7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  assets/minecraft/sounds/dig/grass2.ogg
- Size 4KB
- SHA256 55800a8e76ba04e2e7bc01785d86cf6ef1c3be1687f55576894faf16bd0f14f0
- MD5 f6a2750e1ed84a42c173f921f4a7a87c
- SHA1 7acfc0f6657637c3507fcae6b094c7a955eecd1f
- SHA512 32d68e77815b3b90875839d4b764c4e9cc2c482d749070b323b05e7414616230d43e2618a8f552ae651b97c80ff732b4275164eda21950013585114d017b739e
- SSDEEP 96:3+ONnv5PmB1zSTOjzwls2n773alJSn6viiU8:3Hnv5O3iOnwOEqJS6i58
- TLSH
  T1B2A118DC99B481BFEC17B2FB304A6A5A03D07EE671603BF7A795487544F9A416C7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20
- Target
  assets/minecraft/sounds/dig/grass3.ogg
- Size 5KB
- SHA256 ca73c6e22727e69258d97d78a8c4e4c587edb4c0dde6dd70d5c618d9fd5f05f7
- MD5 74b8846a2cb10f45280e5980bad977c2
- SHA1 1b42e4f905d0d0a5d7f107a0298b955b43915e68
- SHA512 44763bdfd8a2c6268d8fa2afbed131fd6082a9774785c9814e98b5d1e1a185cd4d19f451106601249a8065069013c6870ebb63b17077ea7e40dee8205f4d885d
- SSDEEP 96:CvxONnv5PmB1zSTOjzwls2n773aouoWQn/FOK5c:CvSnv5O3iOnwOEpuof/ZW
- TLSH
  T196B11ADC99A540AFFC03B2FB315AB64D03D07AA561603BF79B5A447944FEA422C6405C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21 behavioral22
- Target
  assets/minecraft/sounds/dig/grass4.ogg
- Size 5KB
- SHA256 be92a8140b8aab717e23a7979a646a8daabd598ccdbb08949e0cf78069289361
- MD5 6f75a6f9f4259272fe0436e83a1e8390
- SHA1 c91bfbf3c92e24aa783b9e96bf0752db4e897b70
- SHA512 23916169522eba94265fc18172c3504e1edeb34a63846a03cd8e229dbd15d2256c6eda7f9162d7f5e254a3a451988a22310c67766077e11a5daaa2f628d3f926
- SSDEEP 96:cONnv5PmB1zSTOjzwls2n773aAzb7jkA+pzTSQ:hnv5O3iOnwOEFfjRWz2Q
- TLSH
  T17CB10ADC957041AFFC13B1FE205B661603D07AE5B6A03BF39BA5496605F9E45AC7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  assets/minecraft/sounds/dig/gravel1.ogg
- Size 5KB
- SHA256 be92a8140b8aab717e23a7979a646a8daabd598ccdbb08949e0cf78069289361
- MD5 6f75a6f9f4259272fe0436e83a1e8390
- SHA1 c91bfbf3c92e24aa783b9e96bf0752db4e897b70
- SHA512 23916169522eba94265fc18172c3504e1edeb34a63846a03cd8e229dbd15d2256c6eda7f9162d7f5e254a3a451988a22310c67766077e11a5daaa2f628d3f926
- SSDEEP 96:cONnv5PmB1zSTOjzwls2n773aAzb7jkA+pzTSQ:hnv5O3iOnwOEFfjRWz2Q
- TLSH
  T17CB10ADC957041AFFC13B1FE205B661603D07AE5B6A03BF39BA5496605F9E45AC7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  assets/minecraft/sounds/dig/gravel2.ogg
- Size 4KB
- SHA256 55800a8e76ba04e2e7bc01785d86cf6ef1c3be1687f55576894faf16bd0f14f0
- MD5 f6a2750e1ed84a42c173f921f4a7a87c
- SHA1 7acfc0f6657637c3507fcae6b094c7a955eecd1f
- SHA512 32d68e77815b3b90875839d4b764c4e9cc2c482d749070b323b05e7414616230d43e2618a8f552ae651b97c80ff732b4275164eda21950013585114d017b739e
- SSDEEP 96:3+ONnv5PmB1zSTOjzwls2n773alJSn6viiU8:3Hnv5O3iOnwOEqJS6i58
- TLSH
  T1B2A118DC99B481BFEC17B2FB304A6A5A03D07EE671603BF7A795487544F9A416C7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  assets/minecraft/sounds/dig/gravel3.ogg
- Size 5KB
- SHA256 ca73c6e22727e69258d97d78a8c4e4c587edb4c0dde6dd70d5c618d9fd5f05f7
- MD5 74b8846a2cb10f45280e5980bad977c2
- SHA1 1b42e4f905d0d0a5d7f107a0298b955b43915e68
- SHA512 44763bdfd8a2c6268d8fa2afbed131fd6082a9774785c9814e98b5d1e1a185cd4d19f451106601249a8065069013c6870ebb63b17077ea7e40dee8205f4d885d
- SSDEEP 96:CvxONnv5PmB1zSTOjzwls2n773aouoWQn/FOK5c:CvSnv5O3iOnwOEpuof/ZW
- TLSH
  T196B11ADC99A540AFFC03B2FB315AB64D03D07AA561603BF79B5A447944FEA422C6405C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29 behavioral30
- Target
  assets/minecraft/sounds/dig/gravel4.ogg
- Size 5KB
- SHA256 be92a8140b8aab717e23a7979a646a8daabd598ccdbb08949e0cf78069289361
- MD5 6f75a6f9f4259272fe0436e83a1e8390
- SHA1 c91bfbf3c92e24aa783b9e96bf0752db4e897b70
- SHA512 23916169522eba94265fc18172c3504e1edeb34a63846a03cd8e229dbd15d2256c6eda7f9162d7f5e254a3a451988a22310c67766077e11a5daaa2f628d3f926
- SSDEEP 96:cONnv5PmB1zSTOjzwls2n773aAzb7jkA+pzTSQ:hnv5O3iOnwOEFfjRWz2Q
- TLSH
  T17CB10ADC957041AFFC13B1FE205B661603D07AE5B6A03BF39BA5496605F9E45AC7008C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32