Overview
overview
8Static
static
5Optimized/...d1.jar
windows10-2004-x64
1Optimized/...d1.jar
windows11-ltsc_2024-x64
8Optimized/....5.jar
windows10-2004-x64
1Optimized/....5.jar
windows11-ltsc_2024-x64
1Optimized/....5.jar
windows10-2004-x64
1Optimized/....5.jar
windows11-ltsc_2024-x64
1Optimized/....7.jar
windows10-2004-x64
1Optimized/....7.jar
windows11-ltsc_2024-x64
1Optimized/....0.jar
windows10-2004-x64
1Optimized/....0.jar
windows11-ltsc_2024-x64
1Optimized/....5.jar
windows10-2004-x64
1Optimized/....5.jar
windows11-ltsc_2024-x64
1Optimized/....0.jar
windows10-2004-x64
1Optimized/....0.jar
windows11-ltsc_2024-x64
8Optimized/....2.jar
windows10-2004-x64
1Optimized/....2.jar
windows11-ltsc_2024-x64
8Optimized/....5.jar
windows10-2004-x64
1Optimized/....5.jar
windows11-ltsc_2024-x64
8Optimized/....1.jar
windows10-2004-x64
1Optimized/....1.jar
windows11-ltsc_2024-x64
1Optimized/....5.jar
windows10-2004-x64
1Optimized/....5.jar
windows11-ltsc_2024-x64
1Optimized/...1m.jar
windows10-2004-x64
1Optimized/...1m.jar
windows11-ltsc_2024-x64
8Optimized/...13.jar
windows10-2004-x64
1Optimized/...13.jar
windows11-ltsc_2024-x64
1Optimized/....0.jar
windows10-2004-x64
1Optimized/....0.jar
windows11-ltsc_2024-x64
8General
- Target Optimized.zip
- Size 17.9MB
- Sample260707-kdf74sdy2w
- SHA256 26c772ca64c93ffa49c67bb84cb1a716bb269b4e1e9ab47d0c2195d2c7b8d2b7
- MD5 1dc67e7702c19d94712ffb05787c0b1f
- SHA1 b4f38e0e91883c1cab7fd9c26288ca90abcbf79c
- SHA512 ac6ca4847719ec5d9137fed7f9dd9991098ca3c3199ead78d58fd3bfeca700d7b562a0a66f182cb6cf27ed032c775310422811f1c40c011bb35675b5e6e9d009
- SSDEEP 393216:tYTHaecSxBye3YyW6lXGtZsujhKi6maXF8B9byDAXBrIST+2UVv49sQCJv4u:tQ6eXdoymtZmihz2AXBM2wvoshJL
- TLSH T1001733EF473706E55FE4373460166A72C00934A94EE19D2CB256F7FE1EA42AEEB20147
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Optimized/ALPHA.caesium-forge-1.16.5-0.6.4-build1.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Optimized/ALPHA.caesium-forge-1.16.5-0.6.4-build1.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
Optimized/ClitMod_1.16.5.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Optimized/ClitMod_1.16.5.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
Optimized/FpsReducer-forge-1.24-mc1.16.5.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Optimized/FpsReducer-forge-1.24-mc1.16.5.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
Optimized/HappyVisual 1.12.7.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Optimized/HappyVisual 1.12.7.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral9
Sample
Optimized/Rhodium-1.16.5-V1.0.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Optimized/Rhodium-1.16.5-V1.0.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral11
Sample
Optimized/betterfpsdist-1.2-1.16.5.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Optimized/betterfpsdist-1.2-1.16.5.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral13
Sample
Optimized/cullparticles-1.16.5-1.0.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Optimized/cullparticles-1.16.5-1.0.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral15
Sample
Optimized/entityculling-forge-mc1.16.5-1.5.2.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Optimized/entityculling-forge-mc1.16.5-1.5.2.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral17
Sample
Optimized/ferritecore-2.1.1-forge-1.16.5.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Optimized/ferritecore-2.1.1-forge-1.16.5.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral19
Sample
Optimized/lithium-forge-mc1.16.5-0.6.6+rev.1.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Optimized/lithium-forge-mc1.16.5-0.6.6+rev.1.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral21
Sample
Optimized/modernfix-forge-5.18.0mc1.16.5.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Optimized/modernfix-forge-5.18.0mc1.16.5.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral23
Sample
Optimized/performant-1.16.2-5-4.1m.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Optimized/performant-1.16.2-5-4.1m.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral25
Sample
Optimized/rubidium-mc1.16.5-0.2.13.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Optimized/rubidium-mc1.16.5-0.2.13.jar
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral27
Sample
Optimized/smoothchunk1.16.5-2.0.jar
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Optimized/smoothchunk1.16.5-2.0.jar
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target Optimized/ALPHA.caesium-forge-1.16.5-0.6.4-build1.jar
- Size 344KB
- SHA256 6a356e71a6250e0833673fa2301e788f1c394b8a6d34a8ee58058c0b8fc6eb34
- MD5 f020128cea5ae12cbf656d627119f5a7
- SHA1 9fef7691a94d3fb9ca4396a11c4a3f04483c05eb
- SHA512 3d603c69e03dab8eba5297efd50c4bac374242e5526a7726469016cb4dd3c5357da5e01f73e480c16095f5e01c8be21fbc012330269d5ee56d3b0ebc39046440
- SSDEEP 6144:Xe4eHdyN4FRBtVSwSFgyYDaMDRWARkZBOVTsTxpNou4TqQqNu:XZN4bBtVCFDYD2AslpNX4TXuu
- TLSH T15E74AD4A3FEFEA27FE0E9771554B2056E6A09D71E610D4D3AFE04B0B055182C0B66DBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Optimized/ClitMod_1.16.5.jar
- Size 216KB
- SHA256 bd643dc66dfaf8505d84b26148eec568797daa2d783e25aaef2847863f41fc20
- MD5 cbba4138a3b58d8528a8bd473ec9a555
- SHA1 51584eaecb2e9f16f459811cedfcceb5c6d0cc40
- SHA512 95079487b196a19177908633d17aa0044205964d335379c399a477532e9f52305603db5e1e2635bf0734779219f21035e766b4406c2d011b00fa9b575baddeb1
- SSDEEP 3072:3GDcukfBQyxvdXNexvdXNYxvdXN3xvdXN9xvdXNAxvdXNHxvdXN/n:2DRGBQi0qlj+Zx
- TLSH T12C24E18CEB6AD482EFB6E1FED15F618E995A174100CB87063BC05B940AD68719B73E13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Optimized/FpsReducer-forge-1.24-mc1.16.5.jar
- Size 92KB
- SHA256 7455e9c992270b0302190ea288b7f3fe3791106345ef4095978d081d78f5756f
- MD5 33801faed801cb3427b1b20cbb9a44fe
- SHA1 46b54c1dc54a560593d938cd73cee5c28e8465f6
- SHA512 9e37b45f733de8c9930854315554c55f1c5f7b7787327eab8ad5071373cfd9153b5cd54cf8574001816973983bdd14257f5d3f5493eb879f66ae8b93e8c8736a
- SSDEEP 1536:5eZuZR29gXwmNJfefp5NknICWMliMoA10U4NfwiCZbYaLX7ruJAxCw4:5KH2AmDfeKnwMckYqBYinuJAov
- TLSH T10393BF8F7AB54877C6430F3DC845DAD3FC1946A9A002B187172C3B9109B9D535BABA8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Optimized/HappyVisual 1.12.7.jar
- Size 15.7MB
- SHA256 ed8d86a0da051e13babb7fbcfd5c481a21beea840a98520f7bdfebe7a614b481
- MD5 28c3f28a9d647a9816e832778b2139a5
- SHA1 69b1760d48db38980e80094a0f0ca24e17889073
- SHA512 3645604ba628880ce9324d0e45fbd86027a3dd1d8204da7fe6c51d05266c86194d5f42268c0192325a6409d52d90a6296b6b3ad397b0a0ba164f20f25aa4dabc
- SSDEEP 393216:Fldhq2MoWBjFuKcE8lXoDJfmjBFVdbFj1W249hq98WsB1k:zdhUodK13qFVdS2Eha8nB1k
- TLSH T17EF6336D82392165EB50663AF0092583862D91054FB2742E20B5F7BE3FBADDCBE07717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Optimized/Rhodium-1.16.5-V1.0.jar
- Size 22KB
- SHA256 3c4020904cb2a2fe5d203b0037aa7f8e5ea600a8c55e1aa9c95b62a536590703
- MD5 35a3b433ae8141e8375e0b964f0a8d92
- SHA1 e6f3c763e3551f09b3d72238bd08fe9510b9cd8f
- SHA512 9b2c05e9f9d337c6edf41d1b921458b2593fbc9de5ca86633073b9168dc984be2584d8ce444b07bc49c8551b227ed693c11efeef7726507164299cf23ac58c3c
- SSDEEP 384:ZRttUhoJgTXxJoBsbcaHd7DwcsHXBcWCM+hCST7YUvdms:LUWJglJAsztkcXYU1ms
- TLSH T1E6A2D1B43F8D9688E507E47185816514FDD3F6AC90174A573A8CAD09CD9CDC82F0ABEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Optimized/betterfpsdist-1.2-1.16.5.jar
- Size 14KB
- SHA256 02af47e907b36f802818e62472811ea3b668da9bb23645120ca090707376f529
- MD5 2308031c7afa5e023fd5d988210890f7
- SHA1 2bbfb89dbfb5275f0c7f31d8739fdd94461a183e
- SHA512 b3b511d57c82f5016ce77bf2bcc5472018a36226df702fac86dfa14b598abcff3eb10e9e22a1252219f945efbd61d8631e91ff47ed04369a555cc7e2e219825e
- SSDEEP 384:ecT9udhgBA/t6FdNeC5szbbHYIWUDvPZmwRVpqrzn/Kf8YXpDfXs3QGLElSRcbSU:jLAHC5s7rrUC
- TLSH T1C7527D27BEACE82DF08B4A3D61A9D13BE7340B4D5105690B4B256C474A37D560B23EDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Optimized/cullparticles-1.16.5-1.0.jar
- Size 14KB
- SHA256 3904e8c9e4fa9d3b7e0eae513c5c393b35e830ef40055ec0f74c2184205f2d12
- MD5 f90aa5f03340d0062f8127ad1638f2c5
- SHA1 3d42b364820c5081a791dd08a7c146178a48cb26
- SHA512 93e9ec0efcad4f88e82dda815ac372f44ce2c27166d27eff3dee3312cfabc979033f8503243dabbafcd07883090ff785ffe111a6164d7edb34953a62a37c9b6b
- SSDEEP 192:zHLxDNpXJalA1bTqOe42SrKjUdDbTqOe42SrKjU1lIOG+Lej4IhAW:zrxDN7alWbMNSkUdDbMNSkU1lIoyT
- TLSH T1F7528E296FBC6DBAC46BD63595856B7398146348A3CA5833C83A093E4765DC01B8ECCF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Optimized/entityculling-forge-mc1.16.5-1.5.2.jar
- Size 45KB
- SHA256 452d9fe997d8514abd28f3b06245a388385cd8b9baf98cce3c76c2915cd7db91
- MD5 8696ac24f0d209aadaf754bed9c2e1f6
- SHA1 01a838e9fc804dee41fca6045012569fc5df42ce
- SHA512 90d9f430d17701ab41276d5f970f078192e7ef87e57f6d1ca7dcb0710ab5a19c07c5bd9762e1ab5cb4cd46aa391d3ecdadbae405936bb563264ee9155f2fa0bc
- SSDEEP 768:mN0oOMbUcdb914cjUf+LRPUKcTrpla8Cf5emh2Ql7AeUO96jGsr0cOF/r8ty3WSB:mWMbU2z8FmrYUA/OIalxFjV/Kw
- TLSH T1E523AD3ADECD6B7FC2C29077D002A04BEA365AC7452CB226E0E71D16BE5EC152759B0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Optimized/ferritecore-2.1.1-forge-1.16.5.jar
- Size 106KB
- SHA256 9aec89734cdf8cb0ee31649e3f6aab9c04f2621eddecff8e31ccdfe18cf8e87a
- MD5 6a96a36de00e5d8e9bf2e87634d13125
- SHA1 3ae8dbe663156a8dec621d255856356444586905
- SHA512 129eaec4743214258ed2f426192eba65f8268697fd37a0fc67f868d22b2eaea4d60d8e29100b034a00347672f830f3c4a4a3a94d2307d02f60c00ff4bd27f6a7
- SSDEEP 3072:R4td/4TN4uBYe+RRaAF4c0ZXGnG2YUT4UirwD9C:UdeN4uBeRZF4/ZWnFbT4tr8C
- TLSH T12FB38F2F396CF86EC98389772863C126E041D1FEC7346A1B17A5999F9C08F6C171978E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Optimized/lithium-forge-mc1.16.5-0.6.6+rev.1.jar
- Size 346KB
- SHA256 dac7f49678d38c46434a09e8448720a9af0faec3d11c78e737aa8ff3060a12ae
- MD5 cae487d3b9221474184fbb71e18e49e2
- SHA1 c08015f872efee6653cfadc395d7f68f1c8db01e
- SHA512 ccdc4c4cf19d365d4ae8fc2bcd96e8309799708b9ef16ab92a27a66e9f8505b2c4a27006bed50eb5db44cccb91ca88b22f9ba5f9016675ddf1f5a5054d6f78ff
- SSDEEP 6144:EyLd0k+dxBvVHVbNz4BbCtH405pj+ZL9og3yptTAYy30/AlD:wk2xBvhVb1uZZL6WyptTAYAplD
- TLSH T199749C4A2FFFE226FACFA7F2484B6062FAA09D74E6114453A3D04B5B055184C0B67DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Optimized/modernfix-forge-5.18.0mc1.16.5.jar
- Size 846KB
- SHA256 17ff7a1096275e1c6706a8f65d3f903b5eccb4a979f4aeb5b4302b3966c5bde8
- MD5 6989c0a2e20fbe4c2a431b1e64b0e15c
- SHA1 bd020d379e36ed8a2568fa76d998aff265cb57bb
- SHA512 5db2515339eb1727ec5cb232ca560f0ef689348319a5bb1f2c7e4df1ec4fb2077363c5a00929b98abc2dd4e94c76b4b729b4940602cf9fb778c5e002a9a46ad9
- SSDEEP 24576:geiyVAdfRh2BgEFgAorDP62IfuJkzCQdSBwQ:geLV2JhV2PoHo/SBwQ
- TLSH T14205BF206AB6FF3ED70312B315766885750A4F68B941609FAA9C0B4A49F6C0B5F07FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Optimized/performant-1.16.2-5-4.1m.jar
- Size 228KB
- SHA256 7451c817430b509eb88dcd23933973110ed659a06f3cfdb1933ceb33bdfab656
- MD5 df657fc87a17277cf8ebee8473d495cb
- SHA1 06d25e86656863a0ac428b090fbfc9e0fbb0b115
- SHA512 201e6135b7fad580dafde28ae831f48c19d34d335a2e311bf98d68bb7890ded8a89af9e67645c922a6bfdf7b109503ab5a2dbe7247e2da0f7b2fd28af63952f8
- SSDEEP 6144:203ZOYYL0G8AL+pRtEwc502jQTPxArHXtD3/o:NjDACiwiPsLGrHXtz/o
- TLSH T12334BE86FFFCA32AFF23553144C5902552381B9D97C1782F497E295E7967E800B8EA8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Optimized/rubidium-mc1.16.5-0.2.13.jar
- Size 610KB
- SHA256 14254f46a024a702df6123d314fedda9048c2bfad22c7fa65317927c0abdca9c
- MD5 908bbd1fd7b988bc61d685344e6de496
- SHA1 b3f1d3460e40e7efc60f503a8d4ba4d551451857
- SHA512 7ac6139c2836380ed15fdca4adb4229b47b95653c5f0c8066b5cd204268e6c47d17c82998727246f7e4e06630213b47cdd2093fddac6274e3417ae0b285f93fe
- SSDEEP 12288:E4ZjmP6fMqG9BApfwgevG2Ah/Ua4kTepDp4paC2AMi:jmP6fTfDxhMUTeTBCci
- TLSH T195D48D01FDEF1128C60B8A3ECD994545B8B279B8D32551079BD90B0B4D865D81FBAFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Optimized/smoothchunk1.16.5-2.0.jar
- Size 13KB
- SHA256 e7ab1d4fd31ee8e8be75a711df7b403d54a86514432302c8ad79a87851a2bc26
- MD5 42a45cfea269961a3044c9b0ac834626
- SHA1 3e5f2bacf1698de074efa720353a362f086e8b96
- SHA512 774229e8e4cebe7f2ff0740f6464bceb5e7e44e277ad7d4121aaf78e20637bc3c428a7c399ab8514062f0bd3ef4524ab505a7ba117bb50e171ff5f05a6aff043
- SSDEEP 192:7/pCMDjV562DqObC4N1yI3rFXh7O917sPz0/vDa8aOnlUOhQF1Z6s8:7EMDjVjqObxNkI7FZ67sPzUvFVlU/8p
- TLSH T1F3525C1FFE88E60DD98B89734680C517F15E126A5128C0AB46FD55DB1F21F820B9BECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.