0344239db0796203258e5ef775bb0b1652b232cd4e4bca3880a7341d240d4498

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/06/2026, 13:11

Target
Jenny-mod-1.21.1-main/com/schnurritv/sexmod/a0.java
Size 4KB
Sample260606-qe7pcafs21
SHA256 0344239db0796203258e5ef775bb0b1652b232cd4e4bca3880a7341d240d4498
MD5 ae3ddc503d832053ff7d3ea8bc1ed0bf
SHA1 b9d147fe517ed919ae71b07090804437d8efaaef
SHA512 7b8d8f9969ad4d18462e897cb0ab349dd591f1c110d53ec31a2102b582ac1e66df6f82389e847e34b273da727dd39178c7f39992ab821ae8d1c7250292a25235
SSDEEP 96:cC2b/VDpJP8DKTdHMSMtEmiRjtjEjJ5itH+W6cm+3gNyEEKnS0ebwLLU9vEQXpo4:cCelJmOq9NyEEKTY9cQXWD9bM0Qr
TLSH
T114A1331784AF6E7501E35288DCA29251E236C0A33B287FD6B85C0F206FDC5E09277B25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-125073035-2952146151-721812867-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1364	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Jenny-mod-1.21.1-main\com\schnurritv\sexmod\a0.java
1⤵
- Modifies registry class
PID:2608

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact