4327ef74e74aa49add625f3323f9e283349a5d996d7d68b01d044c8d8bb4788f

Sharing

Copy URL Twitter E-mail

General

Target
Eaglercraft-1.21.1-TeaVM-main.7z
Size 10KB
Sample260623-hlchsabs6x
SHA256 4327ef74e74aa49add625f3323f9e283349a5d996d7d68b01d044c8d8bb4788f
MD5 870a70419350696ad6ec807d2eddadd9
SHA1 e4d4782a3c29de061d9cafd36a3b70b6b44b79d9
SHA512 2639727f29401951e72a0279377cb1f31dd848c077b5f37b46453029c3751ccfa04e2dcf94f71c1b86ee306db0054c4bdbef75ac17de474d3d8afb16ea2c583f
SSDEEP 192:04/bBEUq8t08R90EH3DQJ1X79t5MadPPxvLi8zIRekb5QZOL5ErgiHdQLJ:0gbm5qXVE1PZhs0wSci9q
TLSH
T16D32BF9DBF9284F5BE0068DB9A5A1A3BDB0930520E451326E06451F9B3335F7A67387C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Eaglercraft-1.21.1-TeaVM-main.7z
- Size 10KB
- SHA256 4327ef74e74aa49add625f3323f9e283349a5d996d7d68b01d044c8d8bb4788f
- MD5 870a70419350696ad6ec807d2eddadd9
- SHA1 e4d4782a3c29de061d9cafd36a3b70b6b44b79d9
- SHA512 2639727f29401951e72a0279377cb1f31dd848c077b5f37b46453029c3751ccfa04e2dcf94f71c1b86ee306db0054c4bdbef75ac17de474d3d8afb16ea2c583f
- SSDEEP 192:04/bBEUq8t08R90EH3DQJ1X79t5MadPPxvLi8zIRekb5QZOL5ErgiHdQLJ:0gbm5qXVE1PZhs0wSci9q
- TLSH
  T16D32BF9DBF9284F5BE0068DB9A5A1A3BDB0930520E451326E06451F9B3335F7A67387C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Downloads MZ/PE file
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Eaglercraft-1.21.1-TeaVM-main/Eaglercraft-1.21.1-TeaVM-main/classes.js
- Size 22KB
- SHA256 40d3090d8e4ae557fb5607e4170e4b2e344593336ed0f398a8a646161723d824
- MD5 2cd3a3032449d4dbc213c7a29faf16f7
- SHA1 91c3c64ccd5bc01b752269f2c981dd016f577ea9
- SHA512 120d762f0190e30c193094e4fe6b27ce08299d18e682fdf91d5b377285144201010fae27e44d6815666b968f2e8da852e36f7e23ae7bfedc3f5f61c8f3e24324
- SSDEEP 384:Zyjez5sbVhhVCK8oAs+RKwpqaBgwE+MvX+Mm:ZyjeNqVjoKKsiKwpqaBVEpv+Mm
- TLSH
  T140B252A87B93B57891670473487F510FE2397C93B81AE154D205F8DC3EB4428ABB2E4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Eaglercraft-1.21.1-TeaVM-main/Eaglercraft-1.21.1-TeaVM-main/index.html
- Size 1KB
- SHA256 d95b48c01046a29ef76adbb8d9242f06bf7467f4a131ea7d2e046c863547b4d4
- MD5 f1fda157b4e8fa213a8d18d0d19cbb0b
- SHA1 e4de4db4411ab1d63633f59e0fca353cf170502b
- SHA512 d86a8e1ecadd8fe25d1c0164b9826fee6541df31122a4af16b90fe22f7fa9a366dc13766166156d7ab95e12fe7ed90c0dbbacd212d81beaa1ba2f193611a23ec
- TLSH
  T19131455AE70CFD9B016842484DA7F18C40AEC23B85A49CD27DC5619DEACCF6DC1662F5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  Eaglercraft-1.21.1-TeaVM-main/Eaglercraft-1.21.1-TeaVM-main/lwjgl-util.js
- Size 22KB
- SHA256 40d3090d8e4ae557fb5607e4170e4b2e344593336ed0f398a8a646161723d824
- MD5 2cd3a3032449d4dbc213c7a29faf16f7
- SHA1 91c3c64ccd5bc01b752269f2c981dd016f577ea9
- SHA512 120d762f0190e30c193094e4fe6b27ce08299d18e682fdf91d5b377285144201010fae27e44d6815666b968f2e8da852e36f7e23ae7bfedc3f5f61c8f3e24324
- SSDEEP 384:Zyjez5sbVhhVCK8oAs+RKwpqaBgwE+MvX+Mm:ZyjeNqVjoKKsiKwpqaBVEpv+Mm
- TLSH
  T140B252A87B93B57891670473487F510FE2397C93B81AE154D205F8DC3EB4428ABB2E4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8