Overview
overview
7Static
static
7Minecraft ...ft.jar
windows10-ltsc_2021-x64
6Minecraft ...ft.jar
windows11-21h2-x64
6Minecraft ...rt.bat
windows10-ltsc_2021-x64
6Minecraft ...rt.bat
windows11-21h2-x64
6Minecraft ...32.dll
windows10-ltsc_2021-x64
5Minecraft ...32.dll
windows11-21h2-x64
5Minecraft ...64.dll
windows10-ltsc_2021-x64
1Minecraft ...64.dll
windows11-21h2-x64
1Minecraft ...x8.dll
windows10-ltsc_2021-x64
3Minecraft ...x8.dll
windows11-21h2-x64
3Minecraft ...64.dll
windows10-ltsc_2021-x64
1Minecraft ...64.dll
windows11-21h2-x64
1Minecraft ...aw.dll
windows10-ltsc_2021-x64
3Minecraft ...aw.dll
windows11-21h2-x64
3Minecraft ...64.dll
windows10-ltsc_2021-x64
1Minecraft ...64.dll
windows11-21h2-x64
1Minecraft ...gl.dll
windows10-ltsc_2021-x64
5Minecraft ...gl.dll
windows11-21h2-x64
5Minecraft ...64.dll
windows10-ltsc_2021-x64
1Minecraft ...64.dll
windows11-21h2-x64
1Analysis
- max time kernel
900s - max time network
416s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
24/04/2026, 04:27
Behavioral task
behavioral1
Sample
Minecraft Alpha 1.2.7/Minecraft.jar
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral2
Sample
Minecraft Alpha 1.2.7/Minecraft.jar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Minecraft Alpha 1.2.7/Start.bat
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral4
Sample
Minecraft Alpha 1.2.7/Start.bat
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Minecraft Alpha 1.2.7/natives/OpenAL32.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral6
Sample
Minecraft Alpha 1.2.7/natives/OpenAL32.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Minecraft Alpha 1.2.7/natives/OpenAL64.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral8
Sample
Minecraft Alpha 1.2.7/natives/OpenAL64.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Minecraft Alpha 1.2.7/natives/jinput-dx8.dll
Resource
win10ltsc2021-20260126-en
Behavioral task
behavioral10
Sample
Minecraft Alpha 1.2.7/natives/jinput-dx8.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Minecraft Alpha 1.2.7/natives/jinput-dx8_64.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral12
Sample
Minecraft Alpha 1.2.7/natives/jinput-dx8_64.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Minecraft Alpha 1.2.7/natives/jinput-raw.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral14
Sample
Minecraft Alpha 1.2.7/natives/jinput-raw.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Minecraft Alpha 1.2.7/natives/jinput-raw_64.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral16
Sample
Minecraft Alpha 1.2.7/natives/jinput-raw_64.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Minecraft Alpha 1.2.7/natives/lwjgl.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral18
Sample
Minecraft Alpha 1.2.7/natives/lwjgl.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Minecraft Alpha 1.2.7/natives/lwjgl64.dll
Resource
win10ltsc2021-20260130-en
Behavioral task
behavioral20
Sample
Minecraft Alpha 1.2.7/natives/lwjgl64.dll
Resource
win11-20260130-en
General
- Target Minecraft Alpha 1.2.7/Minecraft.jar
- Size 18.0MB
- Sample260424-e2977sey5y
- SHA256 6b032c82bf2f0ab9fe67a06f1da50f19b1104e988d584c476f91c1dd862abf6f
- MD5 6cb50b20b744a1812e3155a5b4459cb0
- SHA1 32cedd8697ebb023f5f2a75d87933c830e15b231
- SHA512 f17fedeb3c554d460a597b82d18be559e58249709d7f223113321ea5a68a96c233c89364b756822062fabad46ec86c0dd8d61f64004487b790a87ca3983f4fe8
- SSDEEP 393216:DRN6no899LElhPQTqJcUUl7S+lsp9ips04aTp6b:X6o69ElpQTqJtY2IspkybaTp8
- TLSH T155173302FEEF212AF9B3F33405C40917B46C43DD980E54AE247A16869DE25C6B76B79C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
pid Process 1428 GameBarPresenceWriter.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1320 OpenWith.exe 688 java.exe 688 java.exe
Processes
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exejava -jar "C:\Users\Admin\AppData\Local\Temp\Minecraft Alpha 1.2.7\Minecraft.jar"1⤵
- Suspicious use of SetWindowsHookEx
PID:688
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:1428
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:1320