Analysis
- max time kernel
54s - max time network
14s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
21/06/2026, 16:07
General
- Target Minecraft Launcher.exe
- Size 4.4MB
- Sample260621-tknefaey9w
- SHA256 bf9acd33cc8df11f01ce293608cad0ded932cba2f854538fe26ff0cea58585f2
Malware Config
Signatures
- Network Service Discovery 1 TTPs 1 IoCs
Attempt to gather information on host's network.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 6 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Minecraft Launcher.exe"C:\Users\Admin\AppData\Local\Temp\Minecraft Launcher.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Xms256m -Xmx512m -jar "C:\Users\Admin\AppData\Local\Temp\Minecraft Launcher.exe"2⤵
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
imageio7656472381264986444.tmp
memory/2080-0-0x0000000000400000-0x0000000000421000-memory.dmp
memory/4368-3-0x000001E6EF7D0000-0x000001E6EFA40000-memory.dmp
memory/4368-12-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-15-0x000001E6EFA40000-0x000001E6EFA50000-memory.dmp
memory/4368-17-0x000001E6EFA50000-0x000001E6EFA60000-memory.dmp
memory/4368-19-0x000001E6EFA60000-0x000001E6EFA70000-memory.dmp
memory/4368-21-0x000001E6EFA70000-0x000001E6EFA80000-memory.dmp
memory/4368-23-0x000001E6EFA80000-0x000001E6EFA90000-memory.dmp
memory/4368-25-0x000001E6EFA90000-0x000001E6EFAA0000-memory.dmp
memory/4368-27-0x000001E6EFAA0000-0x000001E6EFAB0000-memory.dmp
memory/4368-31-0x000001E6EFAB0000-0x000001E6EFAC0000-memory.dmp
memory/4368-35-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-37-0x000001E6EF7D0000-0x000001E6EFA40000-memory.dmp
memory/4368-38-0x000001E6EFAC0000-0x000001E6EFAD0000-memory.dmp
memory/4368-40-0x000001E6EFAD0000-0x000001E6EFAE0000-memory.dmp
memory/4368-42-0x000001E6EFA40000-0x000001E6EFA50000-memory.dmp
memory/4368-43-0x000001E6EFAE0000-0x000001E6EFAF0000-memory.dmp
memory/4368-44-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-46-0x000001E6EFA50000-0x000001E6EFA60000-memory.dmp
memory/4368-47-0x000001E6EFAF0000-0x000001E6EFB00000-memory.dmp
memory/4368-49-0x000001E6EFA60000-0x000001E6EFA70000-memory.dmp
memory/4368-50-0x000001E6EFB00000-0x000001E6EFB10000-memory.dmp
memory/4368-57-0x000001E6EFB10000-0x000001E6EFB20000-memory.dmp
memory/4368-56-0x000001E6EFA70000-0x000001E6EFA80000-memory.dmp
memory/4368-61-0x000001E6EFB20000-0x000001E6EFB30000-memory.dmp
memory/4368-60-0x000001E6EFA80000-0x000001E6EFA90000-memory.dmp
memory/4368-64-0x000001E6EFB30000-0x000001E6EFB40000-memory.dmp
memory/4368-63-0x000001E6EFA90000-0x000001E6EFAA0000-memory.dmp
memory/4368-67-0x000001E6EFB40000-0x000001E6EFB50000-memory.dmp
memory/4368-66-0x000001E6EFAA0000-0x000001E6EFAB0000-memory.dmp
memory/4368-69-0x000001E6EFAB0000-0x000001E6EFAC0000-memory.dmp
memory/4368-70-0x000001E6EFB50000-0x000001E6EFB60000-memory.dmp
memory/4368-73-0x000001E6EFB60000-0x000001E6EFB70000-memory.dmp
memory/4368-72-0x000001E6EFAC0000-0x000001E6EFAD0000-memory.dmp
memory/4368-77-0x000001E6EFAD0000-0x000001E6EFAE0000-memory.dmp
memory/4368-78-0x000001E6EFB70000-0x000001E6EFB80000-memory.dmp
memory/4368-81-0x000001E6EFB80000-0x000001E6EFB90000-memory.dmp
memory/4368-80-0x000001E6EFAE0000-0x000001E6EFAF0000-memory.dmp
memory/4368-83-0x000001E6EFAF0000-0x000001E6EFB00000-memory.dmp
memory/4368-84-0x000001E6EFB90000-0x000001E6EFBA0000-memory.dmp
memory/4368-87-0x000001E6EFB00000-0x000001E6EFB10000-memory.dmp
memory/4368-88-0x000001E6EFBA0000-0x000001E6EFBB0000-memory.dmp
memory/4368-90-0x000001E6EFB10000-0x000001E6EFB20000-memory.dmp
memory/4368-91-0x000001E6EFBB0000-0x000001E6EFBC0000-memory.dmp
memory/4368-93-0x000001E6EFB20000-0x000001E6EFB30000-memory.dmp
memory/4368-94-0x000001E6EFBC0000-0x000001E6EFBD0000-memory.dmp
memory/4368-99-0x000001E6EFBD0000-0x000001E6EFBE0000-memory.dmp
memory/4368-98-0x000001E6EFB30000-0x000001E6EFB40000-memory.dmp
memory/4368-103-0x000001E6EFBE0000-0x000001E6EFBF0000-memory.dmp
memory/4368-102-0x000001E6EFB40000-0x000001E6EFB50000-memory.dmp
memory/4368-105-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-109-0x000001E6EFBF0000-0x000001E6EFC00000-memory.dmp
memory/4368-108-0x000001E6EFB50000-0x000001E6EFB60000-memory.dmp
memory/4368-118-0x000001E6EFC00000-0x000001E6EFC10000-memory.dmp
memory/4368-117-0x000001E6EFB60000-0x000001E6EFB70000-memory.dmp
memory/4368-121-0x000001E6EFB70000-0x000001E6EFB80000-memory.dmp
memory/4368-122-0x000001E6EFC10000-0x000001E6EFC20000-memory.dmp
memory/4368-124-0x000001E6EFB80000-0x000001E6EFB90000-memory.dmp
memory/4368-125-0x000001E6EFC20000-0x000001E6EFC30000-memory.dmp
memory/4368-131-0x000001E6EFBA0000-0x000001E6EFBB0000-memory.dmp
memory/4368-130-0x000001E6EFC40000-0x000001E6EFC50000-memory.dmp
memory/4368-129-0x000001E6EFC30000-0x000001E6EFC40000-memory.dmp
memory/4368-128-0x000001E6EFB90000-0x000001E6EFBA0000-memory.dmp
memory/4368-138-0x000001E6EFBB0000-0x000001E6EFBC0000-memory.dmp
memory/4368-147-0x000001E6EFC90000-0x000001E6EFCA0000-memory.dmp
memory/4368-146-0x000001E6EFC60000-0x000001E6EFC70000-memory.dmp
memory/4368-150-0x000001E6EFCA0000-0x000001E6EFCB0000-memory.dmp
memory/4368-157-0x000001E6EFC00000-0x000001E6EFC10000-memory.dmp
memory/4368-167-0x000001E6EFC20000-0x000001E6EFC30000-memory.dmp
memory/4368-166-0x000001E6EFD00000-0x000001E6EFD10000-memory.dmp
memory/4368-171-0x000001E6EFD10000-0x000001E6EFD20000-memory.dmp
memory/4368-169-0x000001E6EFC30000-0x000001E6EFC40000-memory.dmp
memory/4368-170-0x000001E6EFC40000-0x000001E6EFC50000-memory.dmp
memory/4368-165-0x000001E6EFC10000-0x000001E6EFC20000-memory.dmp
memory/4368-164-0x000001E6EFCF0000-0x000001E6EFD00000-memory.dmp
memory/4368-162-0x000001E6EFCD0000-0x000001E6EFCE0000-memory.dmp
memory/4368-163-0x000001E6EFCE0000-0x000001E6EFCF0000-memory.dmp
memory/4368-156-0x000001E6EFCC0000-0x000001E6EFCD0000-memory.dmp
memory/4368-155-0x000001E6EFBF0000-0x000001E6EFC00000-memory.dmp
memory/4368-154-0x000001E6EFCB0000-0x000001E6EFCC0000-memory.dmp
memory/4368-153-0x000001E6EFBE0000-0x000001E6EFBF0000-memory.dmp
memory/4368-149-0x000001E6EFBD0000-0x000001E6EFBE0000-memory.dmp
memory/4368-145-0x000001E6EFBC0000-0x000001E6EFBD0000-memory.dmp
memory/4368-144-0x000001E6EFC80000-0x000001E6EFC90000-memory.dmp
memory/4368-143-0x000001E6EFC70000-0x000001E6EFC80000-memory.dmp
memory/4368-142-0x000001E6EFC50000-0x000001E6EFC60000-memory.dmp
memory/4368-177-0x000001E6EFC50000-0x000001E6EFC60000-memory.dmp
memory/4368-179-0x000001E6EFD20000-0x000001E6EFD30000-memory.dmp
memory/4368-178-0x000001E6EFC70000-0x000001E6EFC80000-memory.dmp
memory/4368-182-0x000001E6EFD30000-0x000001E6EFD40000-memory.dmp
memory/4368-181-0x000001E6EFC80000-0x000001E6EFC90000-memory.dmp
memory/4368-184-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-196-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-225-0x000001E6EFC90000-0x000001E6EFCA0000-memory.dmp
memory/4368-227-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-239-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-224-0x000001E6EFC60000-0x000001E6EFC70000-memory.dmp
memory/4368-241-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-243-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-252-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-271-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-274-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-269-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-283-0x000001E6EFCA0000-0x000001E6EFCB0000-memory.dmp
memory/4368-287-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-288-0x000001E6EFCB0000-0x000001E6EFCC0000-memory.dmp
memory/4368-292-0x000001E6EFCC0000-0x000001E6EFCD0000-memory.dmp
memory/4368-294-0x000001E6EFCD0000-0x000001E6EFCE0000-memory.dmp
memory/4368-295-0x000001E6EFCE0000-0x000001E6EFCF0000-memory.dmp
memory/4368-296-0x000001E6EFCF0000-0x000001E6EFD00000-memory.dmp
memory/4368-299-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-300-0x000001E686380000-0x000001E68A863000-memory.dmp
memory/4368-302-0x000001E6EFD00000-0x000001E6EFD10000-memory.dmp
memory/4368-305-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-307-0x000001E6EFD10000-0x000001E6EFD20000-memory.dmp
memory/4368-309-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp
memory/4368-320-0x000001E686380000-0x000001E68A863000-memory.dmp
memory/4368-323-0x000001E6EF7B0000-0x000001E6EF7B1000-memory.dmp