MinecraftInstaller[.]exe

Target
MinecraftInstaller.exe
Size 32.3MB
Sample260521-pyb64sft4w
SHA256 0fc1ded9a9459789b76104275682e603868181a0e1928ec0681810e7c8e2bf17
MD5 afc010d82c412d72c66f51768671a976
SHA1 5069c9d61d180af0ed8924cb951423fc4ca74511
SHA512 dac5da0f57c4156fa042aa34e7b65af457052343def137f4497d66eae4c755ed592e83c7546af04d6457851fde77cb4b19c3ab9b2316bd48620e68ab287ff020
SSDEEP 393216:vbekuyo9nMK50UGRXLePuq2ZWy/c5zFviMKe2OHmwv9CsTmsueFFza9yV:iZn/G4Gqk1cWe2iTVCMue3X
TLSH
T10C77CF7808069695C173A2F89E2EF0499831FC0154FA74D563BDF3BB897EE21DE2914B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

MinecraftInstaller.exe

.exe 32.3MB

MinecraftInstaller.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0fc1ded9a9459789b76104275682e603868181a0e1928ec0681810e7c8e2bf17
MD5 afc010d82c412d72c66f51768671a976
SHA1 5069c9d61d180af0ed8924cb951423fc4ca74511
SHA512 dac5da0f57c4156fa042aa34e7b65af457052343def137f4497d66eae4c755ed592e83c7546af04d6457851fde77cb4b19c3ab9b2316bd48620e68ab287ff020
SSDEEP 393216:vbekuyo9nMK50UGRXLePuq2ZWy/c5zFviMKe2OHmwv9CsTmsueFFza9yV:iZn/G4Gqk1cWe2iTVCMue3X
TLSH
T10C77CF7808069695C173A2F89E2EF0499831FC0154FA74D563BDF3BB897EE21DE2914B
MD5 SHA1 SHA512 SSDEEP TLSH

Password

NOTHING

Digest

2a:e0:01:5e:f0:8d:d8:4f:b2:80:dd:19:cc:5a:4b:83:7f:2c:d6:1d:db:99:83:be:e0:ad:d5:03:ff:df:fb:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 9, 2025

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:04:04:6c:74:06:ff:57:2b:27:72:00:00:00:00:04:04

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 12, 2024 - Sep 11, 2025

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:0c:b9:64:e3:35:9c:ec:f4:ae:00:01:00:00:02:0c

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 30, 2025 - Apr 22, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

Major OS version

Entry point

33533246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\MinecraftInstaller\obj\Release\MinecraftInstaller.pdb

MinecraftInstaller.exe

mscoree

dotnet