e205074af8503a11d93575164ad6e5e4b42e9e3f266822e452ed523d5316017d

Sharing

Copy URL Twitter E-mail

General

Target
ai client.zip
Size 32.5MB
Sample260503-dfwx1set7n
SHA256 e205074af8503a11d93575164ad6e5e4b42e9e3f266822e452ed523d5316017d
MD5 1269afcd40856c8beb42c023f18ec50c
SHA1 5c7b86d7e4b86bee7697ecb84357a13eb98b1ac6
SHA512 5a462defd2d0ae84e132757f995a4442633d0edf193f825a3f411776cd2685504729b4e40158d3119ed2f499f4f49bf6347b6843e24f3073505146d1181dd15f
SSDEEP 786432:VVdZZMA7s06vHhO01vdZ8RRPK189EIka1:VVCAwx/LJdZX18R
TLSH
T1577733F4A71C2466D807AA30FA16E3346136CD566B01BDF8AB9006DE9B477C4373968F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  ai client.zip
- Size 32.5MB
- SHA256 e205074af8503a11d93575164ad6e5e4b42e9e3f266822e452ed523d5316017d
- MD5 1269afcd40856c8beb42c023f18ec50c
- SHA1 5c7b86d7e4b86bee7697ecb84357a13eb98b1ac6
- SHA512 5a462defd2d0ae84e132757f995a4442633d0edf193f825a3f411776cd2685504729b4e40158d3119ed2f499f4f49bf6347b6843e24f3073505146d1181dd15f
- SSDEEP 786432:VVdZZMA7s06vHhO01vdZ8RRPK189EIka1:VVCAwx/LJdZX18R
- TLSH
  T1577733F4A71C2466D807AA30FA16E3346136CD566B01BDF8AB9006DE9B477C4373968F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-block-api-v1/1.0.22+0af3f5a7d1/fabric-block-api-v1-1.0.22+0af3f5a7d1.pom
- Size 461B
- SHA256 63a688c5f9b3e246d88e8ea19aa06c8c9db019c41e9337b94d50a51547ad5172
- MD5 a8ba3948f12a671349748907c2169b98
- SHA1 3b1300969bc34cfea5918e26b27897aea1870052
- SHA512 b825cb964ca677f46a18e872305a66bb3a369e7a65d1f6e7385412f2e38495d42c0a9302e06734eeaecefe6cc88c009669df47735dc3c38f246e308f74615ae2
- TLSH
  T1B6F05CD4E2E8C0B1818A8E96EEA7D539D37145BEA6E483F4E0C58D57561B4CE3241287
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-block-view-api-v2/1.0.10+6573ed8cd1/fabric-block-view-api-v2-1.0.10+6573ed8cd1.pom
- Size 466B
- SHA256 873cd44520d184315871645d5d14cdc96bae3023cb6b3483a2a931aaa17c7fc2
- MD5 d1d1c3b22b12487a92a2ff2ad9ecc835
- SHA1 a74d304f62a720fe59b6bdeea6996cbdf444b68f
- SHA512 07dc571616dc7d1aa5efbda05c3ca6c13fd85f8c5308d7f0e9314600f488fb8a809b2d2f999feeec1efa54144fa2853631d9d74b37db366fd1f32162451135b4
- TLSH
  T109F054D4D2F8C0A141964E96DE67D53DD371047DB6D453E4D1C48C57561B4CD2141287
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-blockrenderlayer-v1/1.1.52+0af3f5a7d1/fabric-blockrenderlayer-v1-1.1.52+0af3f5a7d1.pom
- Size 468B
- SHA256 f05417f40c41e01aed98ac14d9b9b1f6b2f3a7d243cb66f1a0565e429410c95e
- MD5 10b8826b1074480af859d36e437c04f3
- SHA1 430bc33021d36dac3e910f4407e55d3f5011e235
- SHA512 93db8d5a057eb203b98db56b838251b1260b842d4da2eb270f2031b608dcfca5905353b3775a45d713e2cec05f29fbcb306b1e77e2031b7d6df63d47486f82ab
- TLSH
  T12CF054D0D3E8C0A141894ED7DE57D529D37145BDA5E843F4E1C49D5B561E4CD2141247
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-client-tags-api-v1/1.1.15+6573ed8cd1/fabric-client-tags-api-v1-1.1.15+6573ed8cd1.pom
- Size 467B
- SHA256 b6ffb0fa2188bc654fe573acc9649286f1dc6b5d0a8750bf5664e123126f42cc
- MD5 267894ccc12eed5d952d69be5ac86645
- SHA1 90afada45e7119c0af6e089c4ea8f2a4ced533ea
- SHA512 c59b9141e215144e9c7ef744cdcbbd8dde3c3959e1a96c810579d6665ce3856f8162199248e802f407b8e73dac8cfd7e3299fdaa7eaba17c14f9a64783fddb60
- TLSH
  T11CF05CD4D3E88071829A8FE6DEA7D53DD33104BEB6E883E4E5884D9B5A1A4CE6142187
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral10 behavioral9
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-command-api-v1/1.2.49+f71b366fd1/fabric-command-api-v1-1.2.49+f71b366fd1.pom
- Size 463B
- SHA256 3a8f5dc95ec13865d9ccb363ca91ff06b57b52046183bcde056eba12a154a617
- MD5 2d219b1592cbd48ced0b3046c5eb5f27
- SHA1 9243d85f50daa22fba33196151dde92f3a53a1a9
- SHA512 8bb770f5152f29b8412377df374a96ea65bc4cd7d152578fcaefbf6d611e3d81dd4dc2086eac491f59f12d6bfeaf571bf60ddb222c5ac1d2dca7b335755e5268
- TLSH
  T1FFF0DCD0D2EC8060818A8F97DFA3D528E33104FEA1E483E8E0C88C97561A4CE614318B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-command-api-v2/2.2.28+6ced4dd9d1/fabric-command-api-v2-2.2.28+6ced4dd9d1.pom
- Size 463B
- SHA256 69c929901f7ed794f5f0f953619a6c43c0987f6ef0e9f0197a9da13d57f38deb
- MD5 47fda2725a39b149f8bbc1ee55d4ba2f
- SHA1 93d284434bfa99186749a897d0b25a68cd7e7bcf
- SHA512 3b83ef233f55054278af0592fe2352472e55fd6212dc19d8cdb40443b3e9b34e607a81d68801e6e3042ba1b8aa4dfdd9d88516b564969ce26bf4ea41ff98124c
- TLSH
  T148F0DCD0D2FC8061419A8FA6DAB3D62DE33104BEA2E483E4D0C84C97564A4CE2142187
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-commands-v0/0.2.66+df3654b3d1/fabric-commands-v0-0.2.66+df3654b3d1.pom
- Size 460B
- SHA256 84eea472f1d5446393b40845700b0362d55c187e6602c9894c093cf7968ad3f3
- MD5 ad789d58624dbdd88a8f25afb816176a
- SHA1 6d30ddec58d50b413778422efe3c227b5998f158
- SHA512 9280c24725b0bcecdec2d80e23cd0b8535fb6d9dcc067114e004fe77abd5592d360843fa0715bf866cacdae38a6ea06ea074152c90df6fc87993598bffd64b71
- TLSH
  T1EBF0DCD0E2EC8060428A8FAAEBA3D12DE33204BEA1E443E9E1C84C5B565A0CE2241187
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral15 behavioral16
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-content-registries-v0/8.0.16+b5597344d1/fabric-content-registries-v0-8.0.16+b5597344d1.pom
- Size 470B
- SHA256 16d7420baf7af16dc48bf8871ce9885383ab77ababb8db58b5d39493ee95e65e
- MD5 00bfb03b2157edf3690d212f5046c70f
- SHA1 a7d3d3b2d7a8be9bd9e073c617d405cbe304e73b
- SHA512 2f48d651f1245cf33eadce4fd75373efdf12ced0ace0fcb5c6ea9cf77627c4272b5169fac644c34da797ad870f4808f0acd50bfc5e742ea6a322dcabb9ba0547
- TLSH
  T1EAF0D4D0D7E8806142CA8E9AEE73D52DD33300BDA1D443E4E1C44C97555A0CD1141247
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-convention-tags-v1/2.0.19+7f945d5bd1/fabric-convention-tags-v1-2.0.19+7f945d5bd1.pom
- Size 467B
- SHA256 8fbbf799735e53182d33f1971b1d04f839eaf093a06683e9a86ff965e84c7964
- MD5 2d07ae606f534cfc0500480731432b88
- SHA1 c1db56ae87637de9ede804a3bcbb928347661ef3
- SHA512 2a5494191f6dd356872f3aa7f0ac9314ce944d6fd916b2ee87d7a760c2e37bfebde77127e302f08edf71cfe80bc8f27aa5ba0e488872390e0b10dbec91274442
- TLSH
  T15DF0D4D0D2D84070429E8ED6DFB7D53CD37104FD66D443F4D4C44C57561A0CE1142247
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-convention-tags-v2/2.5.0+c5e2b5c6d1/fabric-convention-tags-v2-2.5.0+c5e2b5c6d1.pom
- Size 466B
- SHA256 cf16afb453b2c0fb35de486463c6527d1f64e16e594fdbec54b0e2d14009b509
- MD5 9ea98da394a43b7d6d8af6a449498ca5
- SHA1 aacb28d8a01a811a178f488b9d809a1e7181ec07
- SHA512 f07f97d2a10168431635fe8ffd9334a6b96e0d8bf0bf7f8f2e11247ace69a24e57a5c4e7879852181033b29ee179d4333cfb2d695930fbac8d61d2823c98b170
- TLSH
  T1BBF05CD4D2EC80B1429A8EAAEBA7D53DD33144BEA2E443F4D5C85D57962A4CE224224B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-crash-report-info-v1/0.2.29+0af3f5a7d1/fabric-crash-report-info-v1-0.2.29+0af3f5a7d1.pom
- Size 469B
- SHA256 67004e5e552759b22487107a281fa599650055fa7c0048c8918d573e722432c7
- MD5 0c3580efdcedbc157096e055bdbbef2c
- SHA1 8e3c21d5522e6511e5fdedbff9df5d39cc9dd5c4
- SHA512 31b7cc54c6149343fca05e577ead04d4bc9708621dc01364669d980672c3c6ca5840ced1684c22d0b2d84d44d40ce2ccb0f5344678ab2d94b2f2d16c245c239f
- TLSH
  T1F4F0DCD0D3EC80A1828A8E9BEBA3D228E37104BEA2E883E8E1C84D57570B0CE2101147
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-dimensions-v1/4.0.0+6fc22b99d1/fabric-dimensions-v1-4.0.0+6fc22b99d1.pom
- Size 461B
- SHA256 9ec40749c78f30d22fdf4cfc35c840e71d5fea81d8e83aaddbc73e01f1a3ab7d
- MD5 1843785303cf06fe895ad0622062c035
- SHA1 ab320e06eb58811dfd32d67d51c906b39645d4e8
- SHA512 708b639040ef943f21ff81615e044dde3a233d1e534a664261e94318eacf43f2061d7c794478a5a4c6274cf1520b32b334f8144253b8b18e69097f444482de45
- TLSH
  T176F0DCD0E3E880A0829A8FAADEA3D92DD33100FEA5E443E8E1854C57561A0CE2141247
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral25 behavioral26
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-entity-events-v1/1.6.12+6fc22b99d1/fabric-entity-events-v1-1.6.12+6fc22b99d1.pom
- Size 465B
- SHA256 17152a6463f58e8a26662aadba23f9f5ea3222b3115eddd0f5343578d5817e81
- MD5 0aa195d6b09f7c756cfb52e3efa08bf3
- SHA1 2212a45fc47aafa70feef1ac7bf21f316046fa24
- SHA512 b87b1cbe8a5411206d910b73cc2fdcccc4c8e377f4a9e2108dfd6800e5bcd7ea0c5e476d8b07b63304db4d96f36a9951083712fb0c51ccd7d42574a816630dde
- TLSH
  T14AF0DCD0D2E8C0B0829A8FAADBA7D52DD33100FEB5E443E4E5844C575A1A0CE2141187
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral27 behavioral28
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-events-interaction-v0/0.7.12+ba9dae06d1/fabric-events-interaction-v0-0.7.12+ba9dae06d1.pom
- Size 470B
- SHA256 9c3f8425d6206ecc8aaac24ff49a47e57219d8eae7c21b073db2e9b9df117a86
- MD5 d0eec6bb82c03c9f1b2062982ec5019e
- SHA1 bf22348e2c53badea2a2f2780a05bc82c065cfe6
- SHA512 524b7424fbef6def551b86da1b3a8af5ab52d73e9a31c2fe67269a0fb74888e383532f5a7b62b48952cd4c481ba115e40e182eff68d90ede47ad5101ba4ac2d2
- TLSH
  T1F1F0DCD4E2E880B0428A8FAAEBA3C53EE37104FEB1E843F8D0844C57561A0CE2142287
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  ai client/ai client/.gradle/loom-cache/remapped_mods/net_fabricmc_yarn_1_21_1_21_build_9_v2/net/fabricmc/fabric-api/fabric-game-rule-api-v1/1.0.53+6ced4dd9d1/fabric-game-rule-api-v1-1.0.53+6ced4dd9d1.pom
- Size 465B
- SHA256 a3092b1e7afcfab6e055c5e1eaabc0ee0531c9827083a4766973db324f693cb0
- MD5 ac4d15d81bde966df53d242330837a5f
- SHA1 a1bfe1c707ba05a1970faf811e42835b35d4fcd9
- SHA512 85691edb824e8bc0cf8e694aff41673d13083b08713113a4b25bec4f8fcc8db2c27f773279bbad45b65be881729c03a061cb7ee2a29cce38aa661b0287162cea
- TLSH
  T105F0D4D4D2EC806181994FB6DEA7D12DD33140BDA5D453E4D0844C57654A4DD2101147
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32