21be466cf10490d16059440d69a1b0978df6e4011d2cb4b9ea25806edd043b21

Resubmissions

28/06/2026, 14:40

260628-r1vgkshx3y8

28/06/2026, 14:39

260628-r1m3hahz6m8

28/06/2026, 14:38

260628-rz7erahx3v3

Sharing

Copy URL Twitter E-mail

General

Target
Minecraft Mod Installer v26.30+.zip
Size 1.2MB
Sample260628-r1vgkshx3y
SHA256 21be466cf10490d16059440d69a1b0978df6e4011d2cb4b9ea25806edd043b21
MD5 321ba647ee94d6eb1c672d8c22105783
SHA1 59a3fbe8c18ea19041969b21f05bbd0dc1e77372
SHA512 f780157878bccd795bbb74a7f6e9b53dddac32814afee87e409ae4dbf12d3f9016fcc5b877b7588e62d991782b2348b5180ab7935e0bbc1abbab79f3fe3bf9e7
SSDEEP 24576:gg4kDNd7J8cPYI86PuMlboJNLc1JmzNkelwkON73rO9HDJ385KohdZv29rYQA:gR6NFbPxbWMlbyA3KjL43rYVSKMZWxA
TLSH
T1CD45338CDBC6691DB763D4F7A179285447B7C837207DE5B26CEC0F601A2A335B4AA21C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Minecraft Mod Installer v26.30+.zip
- Size 1.2MB
- SHA256 21be466cf10490d16059440d69a1b0978df6e4011d2cb4b9ea25806edd043b21
- MD5 321ba647ee94d6eb1c672d8c22105783
- SHA1 59a3fbe8c18ea19041969b21f05bbd0dc1e77372
- SHA512 f780157878bccd795bbb74a7f6e9b53dddac32814afee87e409ae4dbf12d3f9016fcc5b877b7588e62d991782b2348b5180ab7935e0bbc1abbab79f3fe3bf9e7
- SSDEEP 24576:gg4kDNd7J8cPYI86PuMlboJNLc1JmzNkelwkON73rO9HDJ385KohdZv29rYQA:gR6NFbPxbWMlbyA3KjL43rYVSKMZWxA
- TLSH
  T1CD45338CDBC6691DB763D4F7A179285447B7C837207DE5B26CEC0F601A2A335B4AA21C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Minecraft Mod Installer v26.30+/KG UP Mod Installer v26.30+/Guna.UI2.dll
- Size 2.1MB
- SHA256 2130c7489f5a5e21812c1eab37dc4903b901861a2d545aa607555be269091afd
- MD5 b464fc896b14bfa34f608da53856e999
- SHA1 55568eecc97895cad49a42bffe757e3588c5313c
- SHA512 1b310b16b0973c9100c9d220338ffc9340b4085d7a095cc601998b5cbcb67b927d8665070bd8b6e2af2a29d13762f404a794b79dbe223b48751894a4bf47c5ca
- SSDEEP 24576:ITL3GQ2wuP82+lTVG+3VvkPMb4yk8z1xcfeGwrSe+a/gZmxVsFdHQ/jzaM5PT:U5+dSRzIZ8VsFWN
- TLSH
  T124A5FA147ED4EB27D16BCE33D6E25011E2F1E5A32AB1EB0E72D35768184234578863BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  Minecraft Mod Installer v26.30+/KG UP Mod Installer v26.30+/KG-UP-GOAT.dll
- Size 15KB
- SHA256 d13240737e1c7ea92a9bf9568375fd2b87f659c38d8a3942a71f74cb3919c30b
- MD5 6b0aba6fd0219dce2eda0cb33b874870
- SHA1 a5f0634d070573f6f31a2ab956f122d17ad34431
- SHA512 763e58a561269b11a810cff4f2969fd47bdde9668c298bf15dd6359b92a55530dc3cec0c0730865e42bda87e6853d980d383f04c18cb6ca3bc8269955f1a1a9d
- SSDEEP 192:mFOcnioGxgUZwSF8etTHSnn1/0fWJHpMnmTzMUkujoKpQUKV:hc7Fof1oR0QdwZujoKFK
- TLSH
  T1E162094E339214EDCA06C238C5FF5776B2B1B112069A4E7E5754CB330E72A6D6639E88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Minecraft Mod Installer v26.30+/KG UP Mod Installer v26.30+/KG-UP-v26_30+.exe
- Size 388KB
- SHA256 32d13ec16eec92ee1ccafc8f0f7983deaca98ccfb9b5e29dc2117ffa1b775fb6
- MD5 72252ed369c6fbef52c81180d6b45334
- SHA1 5b82b055f74eea6b8493959dbd60392ebca11c40
- SHA512 bd885e51b44e161e818749a0f77a9eb90bd6f0e38f8e2b3ad4c148496f44eb31884e21f78d6716f169b6e39f8300d36de5461fdb450577945280f31eca40bfab
- SSDEEP 6144:Z3TiFs6rHEqvTeAqUbRR3vVtCMDrD8wyX5k8UF+lcm8rWmYvrV5IZmpLW8vWmYvw:tGFRXbPqMn3jXyJk8UFADvR5WzRvR5
- TLSH
  T121841355A0ED43A2D67E9FBE887896B497F2FC2E1668C5470F03108E607B70584C8F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Minecraft Mod Installer v26.30+/KG UP Mod Installer v26.30+/vcruntime140_1.dll
- Size 49KB
- SHA256 15b2223804ac8a3a10a93233618768413f280c08055cf6e2917dfbc9938246d6
- MD5 cdf9c7a58c4a4e096bceff52d44aa9fa
- SHA1 5e0c48770c327cb59678f17e714879e3b2ddebb0
- SHA512 d5cdee9ab2a5154a019257605676fde319cb41d5b9fb488ec5dd785b6cd6aaecc5acd21b3474fcf99462b20175b8fb886d961a056d0b8da417569c8053be81ce
- SSDEEP 1536:h1QfJ8E97+PVUDNMKCbMokoAhbdHWr0DZ:hOfJP97fpC4oQldHWr0F
- TLSH
  T1E733F72BDD1AA03BD3598C78C9435C05DE63BC968BD1B5CBA7401DE60C66BE49B3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Minecraft Mod Installer v26.30+/Leia-me-voce-for-gravar-video.txt
- Size 186B
- SHA256 cc2d12ce0d6d4dd9721a6e25aa254de70df72167b89be016af5c494a4f852911
- MD5 4d4dbe49fd58307df896e43949045ab5
- SHA1 480d6b8dda141bfcb0591cbf754947ee0b7b8a0b
- SHA512 05ba8862276b36282e06427bccc2ec71faebe7744e2b55e9ea439d1a60b815b662f0455e23f7c47f5e711c38eabccdc0020f07678e34a30f81f8af2df695e070
- TLSH
  T16FC0C02828000323200017CD460C1622B36C14C55AFCB2B7E37FCE84D1C0FCCC80C328
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12