Overview
overview
4Static
static
3Minecraft ...ix.ini
windows10-2004-x64
1Minecraft ...ix.ini
windows11-21h2-x64
3Minecraft ...64.dll
windows10-2004-x64
1Minecraft ...64.dll
windows11-21h2-x64
4Minecraft ...st.txt
windows10-2004-x64
1Minecraft ...st.txt
windows11-21h2-x64
3Minecraft ...mm.dll
windows10-2004-x64
1Minecraft ...mm.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/05/2026, 13:58
Static task
static1
Behavioral task
behavioral1
Sample
Minecraft Windows 10 Fix Online fix/OnlineFix.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Minecraft Windows 10 Fix Online fix/OnlineFix.ini
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Minecraft Windows 10 Fix Online fix/OnlineFix64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Minecraft Windows 10 Fix Online fix/OnlineFix64.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Minecraft Windows 10 Fix Online fix/dlllist.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Minecraft Windows 10 Fix Online fix/dlllist.txt
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Minecraft Windows 10 Fix Online fix/winmm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Minecraft Windows 10 Fix Online fix/winmm.dll
Resource
win11-20260513-en
General
- Target Minecraft Windows 10 Fix Online fix/OnlineFix.ini
- Size 193B
- Sample260523-rabxjsds51
- SHA256 591f2da25857ab9e86b0c6105d0bcab5b691736f70dc3fa7f75090fc91ba282b
- MD5 533ad5435f4da27f3988d137983586f0
- SHA1 9bc8189ce4fdf128e1661e9538e420404dae7e29
- SHA512 587de38020d3aad372f2c8cc9ef71c4063fa10cf017f2212c6c8eef35b5dc23eff04aacc2bc3c00efed6faf0e5638e87e61ba2444d4f5b19ab4209d11b0ada32
- TLSH T1E6C0C0F68602345ACC540AD690124284298F036ECF1EC03FF0FEDA100058F460FAC034
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3480 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Minecraft Windows 10 Fix Online fix\OnlineFix.ini"1⤵
- Modifies registry class
PID:2028
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3480