Overview
overview
8Static
static
3Better Sur...1).zip
windows10-2004-x64
3Better Sur...1).zip
windows11-ltsc_2024-x64
1manifest.json
windows10-2004-x64
3manifest.json
windows11-ltsc_2024-x64
8modlist.html
windows10-2004-x64
3modlist.html
windows11-ltsc_2024-x64
4overrides/...se.jar
windows10-2004-x64
1overrides/...se.jar
windows11-ltsc_2024-x64
8overrides/....1.jar
windows10-2004-x64
1overrides/....1.jar
windows11-ltsc_2024-x64
1General
- Target Better Survival-1.20.1 (1).zip
- Size 6.3MB
- Sample260620-bl7wcscx3m
- SHA256 62ff0fb7d67552265b80b3e962dec8c41dd68d4ad389c72d38b9b113f565147e
- MD5 520ebf79296321ace5e7d6efaf687229
- SHA1 8644a6513e7674d76e96898742db22b318b76ccb
- SHA512 3676e6f836d75896c58dfbb022d0321faee7bd74713a096b55958b9372955842d2f40550a0e19c70d14821e2bca626d3fd325126b9d3b4f167a81c095f69a541
- SSDEEP 196608:kKm6j/eUYq8Avazj8e2pFdTINBuimxO+W2vT8mGUbo:3B/eUYEizj8/ZKEOwBs
- TLSH T1E76633B1C13120ECEF84087E7D52E08A18777A79B61CD972761FAC065AD8FDDCA9C910
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Better Survival-1.20.1 (1).zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Better Survival-1.20.1 (1).zip
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
manifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
manifest.json
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
modlist.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
modlist.html
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
overrides/mods/echovoicebeta-10-snapshot-1.0.0-release.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
overrides/mods/echovoicebeta-10-snapshot-1.0.0-release.jar
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
overrides/mods/fabric-api-0.92.9+1.20.1.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
overrides/mods/fabric-api-0.92.9+1.20.1.jar
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target Better Survival-1.20.1 (1).zip
- Size 6.3MB
- SHA256 62ff0fb7d67552265b80b3e962dec8c41dd68d4ad389c72d38b9b113f565147e
- MD5 520ebf79296321ace5e7d6efaf687229
- SHA1 8644a6513e7674d76e96898742db22b318b76ccb
- SHA512 3676e6f836d75896c58dfbb022d0321faee7bd74713a096b55958b9372955842d2f40550a0e19c70d14821e2bca626d3fd325126b9d3b4f167a81c095f69a541
- SSDEEP 196608:kKm6j/eUYq8Avazj8e2pFdTINBuimxO+W2vT8mGUbo:3B/eUYEizj8/ZKEOwBs
- TLSH T1E76633B1C13120ECEF84087E7D52E08A18777A79B61CD972761FAC065AD8FDDCA9C910
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target manifest.json
- Size 458B
- SHA256 418c8367da4fc41c7a91d6897386a082042ffeaf3acb8b25683b408876646031
- MD5 330f3d1d02b80af05b067de2ca3f4a77
- SHA1 70aa636e32140805d5bf4a6edd3d6d9d966b27a5
- SHA512 2a119e2123b8b9bc484a362538f48227acbc942ec4894b3f647711a1f4b41ec3567480e08e92f692993ed2c25f34ff4f2dacbfba21bece884603ab0317e31092
- TLSH T187F0ED2BE91A6CB7267093BC49B94103F7A10B2F00308C0B3B7E209C2FB2B685095F75
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target modlist.html
- Size 122B
- SHA256 9421cd0697bed568d85e11811514f5783a2416c36a14468e75b33d4a7beb62df
- MD5 4a2c0ffec7a859050ebfbd69e34874b8
- SHA1 9e4775951a968c005605edef1435f7600315f790
- SHA512 e009b8b71c2b89f0d7d711b2dd104f433240a9c1e2e21ff7d82827b5732a67af940b12b711bfd598ae097de352442c669810124884e89bbe70e5402fcdb2f704
- TLSH T1A0B02B72347D7C061714D27D84122B3CC00B90EB0F084FD69121040737402931C05043
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target overrides/mods/echovoicebeta-10-snapshot-1.0.0-release.jar
- Size 4.3MB
- SHA256 b4b79a205a73839a1750e58a6a0020544633a93da24c13419ca724eae561b13a
- MD5 cd5b5145ff2a6a557feed91b097f9e52
- SHA1 0ed4340cc7896033a5fb2c60b21d5fe94d882523
- SHA512 db3636386b05d4cb0313bc689574dfa84ca16776636dcbc8748c05a0d2cbd2a79cb14155f5081bdeda23d2853cdcde3ed62ace82de0d05383c4167b7991db195
- SSDEEP 98304:w6quWL0zxAn0rWrgf5klkB5RYp1VwEFloY7RW/Ws2jZpJ8fB0FIaHgt:BXm0rWrgRk+1Yp1VjFloF/Ws2jS50dgt
- TLSH T1DA2633E6DB30370556191147DA03A0D3ABAAFFA0FF2F949B525BEC5244C6E2C6ACDD01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target overrides/mods/fabric-api-0.92.9+1.20.1.jar
- Size 2.0MB
- SHA256 4056979ccaa1012354dfff14f39fdb085aefb3f1e0224ff45c3af41e4ffed5fd
- MD5 7872cc7a93aad304344f984f13223db3
- SHA1 89c79de1c8e17f3d34fded3a2fe401e7e60a707d
- SHA512 9437e8561c0ce83031607f3015a4d487553c4cdd22ec91e2c874976139d1dcfd3ef909f78b89e8c3a6c35fdab6d79b34ed9624c3462ed2dfbaa85188b7249c02
- SSDEEP 49152:LU65sd8FP6kUjN49cQBswGH7qJ1DxML6FnDtzTDr4IiCq:LU6O/Q+1WbxMGBzTDr4IiT
- TLSH T1FCA53363E04905EEDA0F6CB92D60D106E160B8EE371CEE7B5005185CAFF6EEED260D59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10