General

  • Target
    Optimized.zip
  • Size 17.9MB
  • Sample260707-kdf74sdy2w
  • SHA256 26c772ca64c93ffa49c67bb84cb1a716bb269b4e1e9ab47d0c2195d2c7b8d2b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Optimized/ALPHA.caesium-forge-1.16.5-0.6.4-build1.jar
    • Size 344KB
    • SHA256 6a356e71a6250e0833673fa2301e788f1c394b8a6d34a8ee58058c0b8fc6eb34
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Optimized/ClitMod_1.16.5.jar
    • Size 216KB
    • SHA256 bd643dc66dfaf8505d84b26148eec568797daa2d783e25aaef2847863f41fc20
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Optimized/FpsReducer-forge-1.24-mc1.16.5.jar
    • Size 92KB
    • SHA256 7455e9c992270b0302190ea288b7f3fe3791106345ef4095978d081d78f5756f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Optimized/HappyVisual 1.12.7.jar
    • Size 15.7MB
    • SHA256 ed8d86a0da051e13babb7fbcfd5c481a21beea840a98520f7bdfebe7a614b481
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Optimized/Rhodium-1.16.5-V1.0.jar
    • Size 22KB
    • SHA256 3c4020904cb2a2fe5d203b0037aa7f8e5ea600a8c55e1aa9c95b62a536590703
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Optimized/betterfpsdist-1.2-1.16.5.jar
    • Size 14KB
    • SHA256 02af47e907b36f802818e62472811ea3b668da9bb23645120ca090707376f529
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Optimized/cullparticles-1.16.5-1.0.jar
    • Size 14KB
    • SHA256 3904e8c9e4fa9d3b7e0eae513c5c393b35e830ef40055ec0f74c2184205f2d12
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Optimized/entityculling-forge-mc1.16.5-1.5.2.jar
    • Size 45KB
    • SHA256 452d9fe997d8514abd28f3b06245a388385cd8b9baf98cce3c76c2915cd7db91
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Optimized/ferritecore-2.1.1-forge-1.16.5.jar
    • Size 106KB
    • SHA256 9aec89734cdf8cb0ee31649e3f6aab9c04f2621eddecff8e31ccdfe18cf8e87a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Optimized/lithium-forge-mc1.16.5-0.6.6+rev.1.jar
    • Size 346KB
    • SHA256 dac7f49678d38c46434a09e8448720a9af0faec3d11c78e737aa8ff3060a12ae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Optimized/modernfix-forge-5.18.0mc1.16.5.jar
    • Size 846KB
    • SHA256 17ff7a1096275e1c6706a8f65d3f903b5eccb4a979f4aeb5b4302b3966c5bde8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Optimized/performant-1.16.2-5-4.1m.jar
    • Size 228KB
    • SHA256 7451c817430b509eb88dcd23933973110ed659a06f3cfdb1933ceb33bdfab656
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Optimized/rubidium-mc1.16.5-0.2.13.jar
    • Size 610KB
    • SHA256 14254f46a024a702df6123d314fedda9048c2bfad22c7fa65317927c0abdca9c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Optimized/smoothchunk1.16.5-2.0.jar
    • Size 13KB
    • SHA256 e7ab1d4fd31ee8e8be75a711df7b403d54a86514432302c8ad79a87851a2bc26
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

Score
1/10

behavioral2

adwarepersistencespyware
Score
8/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

adwarepersistencespyware
Score
8/10

behavioral15

Score
1/10

behavioral16

adwarepersistencespyware
Score
8/10

behavioral17

Score
1/10

behavioral18

adwarepersistencespyware
Score
8/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

adwarepersistencespyware
Score
8/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

adwarepersistencespyware
Score
8/10