Overview

overview

8

Static

static

1

Realistic ...yxa.js

windows10-2004-x64

3

Realistic ...yxa.js

windows11-ltsc_2024-x64

3

Realistic ...oor.js

windows10-2004-x64

3

Realistic ...oor.js

windows11-ltsc_2024-x64

3

Realistic ...uaf.js

windows10-2004-x64

3

Realistic ...uaf.js

windows11-ltsc_2024-x64

3

Realistic ...xty.js

windows10-2004-x64

3

Realistic ...xty.js

windows11-ltsc_2024-x64

3

Realistic ...epg.js

windows10-2004-x64

3

Realistic ...epg.js

windows11-ltsc_2024-x64

3

Realistic ...vau.js

windows10-2004-x64

3

Realistic ...vau.js

windows11-ltsc_2024-x64

3

Realistic ...emo.js

windows10-2004-x64

3

Realistic ...emo.js

windows11-ltsc_2024-x64

3

Realistic ...cat.js

windows10-2004-x64

3

Realistic ...cat.js

windows11-ltsc_2024-x64

3

Realistic ...ven.js

windows10-2004-x64

3

Realistic ...ven.js

windows11-ltsc_2024-x64

8

Realistic ...frw.js

windows10-2004-x64

3

Realistic ...frw.js

windows11-ltsc_2024-x64

8

Realistic ...yxa.js

windows10-2004-x64

3

Realistic ...yxa.js

windows11-ltsc_2024-x64

3

Realistic ...xty.js

windows10-2004-x64

3

Realistic ...xty.js

windows11-ltsc_2024-x64

8

Realistic ..._ui.js

windows10-2004-x64

3

Realistic ..._ui.js

windows11-ltsc_2024-x64

3

Realistic ...cls.js

windows10-2004-x64

3

Realistic ...cls.js

windows11-ltsc_2024-x64

3

Realistic ...hdn.js

windows10-2004-x64

3

Realistic ...hdn.js

windows11-ltsc_2024-x64

3

Realistic ...mkn.js

windows10-2004-x64

3

Realistic ...mkn.js

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Realistic Biomes Add-On (addon).mcaddon.zip
  • Size 24.1MB
  • Sample260619-xld4yaaz2j
  • SHA256 2fc625009d56b715adb3dbf057539459c4c5480b6c6710edfa4b3578aeca526b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwareexecutionpersistenceransomwarespyware

Malware Config

Targets

    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/bgfyavb/hvkmyxa.js
    • Size 1KB
    • SHA256 5c82e4c6cfb560a9efd65f627bb6cb604035dfa3db8821585e7eee96f516aec7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/bgfyavb/nqmfoor.js
    • Size 3KB
    • SHA256 30f5963e1403905f96cdf2fa003b7c381527173e46b6dcb9bec7086e7ad1b87f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/bgfyavb/wlqquaf.js
    • Size 13KB
    • SHA256 8aebab9d115d6d61bba7e327a2365509f7977f97f6dede33b2a2f654051d8fc3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/bgfyavb/ytlzxty.js
    • Size 5KB
    • SHA256 8b0a76843e015175272a71d1ef027cf30c0084af91396cd82727b77aa2c60fcf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/bkfngcv/asopepg.js
    • Size 3KB
    • SHA256 968eecd19aabec64acba165395d0143132bb34a45f5b9bf555862e2ffc45e698
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/bkfngcv/nswxvau.js
    • Size 5KB
    • SHA256 ab3d07c05d364539f1f5f1343fa639f9c3bfbdf0c4372f43c48ca8ae5fcac8ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/cnpvemo.js
    • Size 5KB
    • SHA256 abda945209cb97afba94ea331b316e19e75b005147a05905559bab9daf3981e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/jmobfmf_yrplcat.js
    • Size 2KB
    • SHA256 1458dac178e83024487ff5bc3e792cfef1a7f307d2607bea42144a563b3c6bb3
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/nhgyven.js
    • Size 22KB
    • SHA256 3cf25f31caa5b25dba14bfa5f8a885b44bef49c075bf95da2dee1197e0f8d826
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    executionadwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral17behavioral18
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/pkjngck/ewbpfrw.js
    • Size 5KB
    • SHA256 7a8bceff102a5fc348d3aec5768a29cfa647bc08a8268e2017153eaaf3ed482e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    executionadwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral19behavioral20
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/pkjngck/hvkmyxa.js
    • Size 26KB
    • SHA256 65319419d0dba0e99540a53ca52a8f5c4ca4733064d321e246f0ecb484d28dfb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral21behavioral22
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/pkjngck/ytlzxty.js
    • Size 5KB
    • SHA256 9b19a86485314f2e6ee4602cf372613990d116f61aef360c8143b0ca7c50b497
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    executionadwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral23behavioral24
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/rgzkwro_ui.js
    • Size 14KB
    • SHA256 afb24b8d137295dd5583030b7e4bf5804f4edd817880e1ce1662b5b7dca21e9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral25behavioral26
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/shzrcpr_esnhcls.js
    • Size 12KB
    • SHA256 23d3f9776b599ef1806dd7a2c7775e9a91ffecb2c0dd1cba3e0bb77efd442183
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral27behavioral28
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/uqyphdn.js
    • Size 2KB
    • SHA256 8665dc41037ce0d8d4f68b05b3723404a3d1042d791205127ed2a4b541e51266
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral29behavioral30
    • Target
      Realistic Biomes Add-On BP/scripts/oreville_rb/aasvfju/vhbrmkn.js
    • Size 43KB
    • SHA256 6e5d356e0a02f33076dac0971bc4193f226cd4906013c893aa5fe554ee5e5fc0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    executionadwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral19

execution
Score
3/10

behavioral20

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

adwareexecutionpersistenceransomwarespyware
Score
8/10