Overview

overview

8

Static

static

3

Minary Min...er.exe

windows10-2004-x64

8

Minary Min...er.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    899s
  • max time network
    455s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260630-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/07/2026, 09:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Minary Minecraft Launcher.exe
  • Size 12.7MB
  • Sample260705-k793aabt2v
  • SHA256 a3eaab00be2b8c49db744be90ebc71186fedacad9191357c30bfa1caa82486db
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 20 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Minary Minecraft Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\Minary Minecraft Launcher.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5544
    • C:\Users\Admin\AppData\Local\Temp\Minary Minecraft Launcher.exe
      "C:\Users\Admin\AppData\Local\Temp\Minary Minecraft Launcher.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5548
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c color
        3⤵
          PID:7056
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /c title LYTHOR - Discord Privacy Launcher
          3⤵
            PID:5644
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k GPSvcGroup
        1⤵
          PID:3612
        • C:\Windows\System32\SecurityHealthHost.exe
          \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
          1⤵
            PID:6264

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                VCRUNTIME140.dll
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\VCRUNTIME140.dll
                • Size 117KB
                • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                VCRUNTIME140_1.dll
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\VCRUNTIME140_1.dll
                • Size 48KB
                • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _bz2.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\_bz2.pyd
                • Size 84KB
                • SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _ctypes.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\_ctypes.pyd
                • Size 124KB
                • SHA256 0e56107a891100535f2da79d85a5ae65ff1227b4765bd108f8593ac1a1110d81
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _hashlib.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\_hashlib.pyd
                • Size 67KB
                • SHA256 03d233dbace599168eaffec823de6ed7beec8c2a4ebfe9b8a3d8e042a59af3ba
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _lzma.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\_lzma.pyd
                • Size 157KB
                • SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _queue.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\_queue.pyd
                • Size 32KB
                • SHA256 48e76e0ad63f6932b4a77b5819f41c1e7595636ca8d9e824f0943a14b8bb5035
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _socket.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\_socket.pyd
                • Size 83KB
                • SHA256 3efa4636cf9e350856f6927d67a4c2564bf9bd2758a00bbf17d3aece5b60016d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _ssl.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\_ssl.pyd
                • Size 175KB
                • SHA256 0bc527d2dbc50009f43b2ed5d5982c4f63f4b647647ffa9eda612dcda80f6040
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _wmi.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\_wmi.pyd
                • Size 39KB
                • SHA256 a980f1e7a29842bd946863fc2693fbeb555a9dc0f9e1630dfed9a2fcdef3ece2
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                base_library.zip
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\base_library.zip
                • Size 1.3MB
                • SHA256 581f77071cfbcd6a756d7bbf7e4ed3b8c22d96ef576558dd860e31da011ab699
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                config.ini
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\config.ini
                • Size 209B
                • SHA256 ce0fddf3273a3ccb654da70cb6eeb46c64666a3dd2c08fb4fcd0d74507422751
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                libcrypto-3.dll
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\libcrypto-3.dll
                • Size 5.0MB
                • SHA256 ccfffddcd3defb8d899026298af9af43bc186130f8483d77e97c93233d5f27d7
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                libffi-8.dll
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\libffi-8.dll
                • Size 38KB
                • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                libssl-3.dll
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\libssl-3.dll
                • Size 776KB
                • SHA256 007142039f04d04e0ed607bda53de095e5bc6a8a10d26ecedde94ea7d2d7eefe
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                _psutil_windows.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\psutil\_psutil_windows.pyd
                • Size 69KB
                • SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                python3.DLL
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\python3.DLL
                • Size 68KB
                • SHA256 fb975a606e7fbf74f64260e3f60c3490b4f74a183c0926fd6ed1ac4c52ac7b1c
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                python312.dll
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\python312.dll
                • Size 6.6MB
                • SHA256 9a0e3435aaa680d868150f87ab3e388ad2eebc22f87e036155c7b4eda8cd2120
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                select.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\select.pyd
                • Size 32KB
                • SHA256 d4d7181b11db0bd22a6cd5cda6f8583d1f5c77615fd0a6ca33350619d6e0438a
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                ucrtbase.dll
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\ucrtbase.dll
                • Size 1.3MB
                • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                unicodedata.pyd
                • Path C:\Users\Admin\AppData\Local\Temp\_MEI55442\unicodedata.pyd
                • Size 1.1MB
                • SHA256 208ee1cd3cbad0828433ca7246b05be2b1ff5569983d27d296c0b38888585488
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download