General
- Target KryptonPlus-_minecraft_.jar
- Size 5.0MB
- Sample260709-gl11psdy9v
- SHA256 13f6a610e6be5a5f8f91a7022a7f65f95ce143a3258b23fb76f80bb7baf261b9
- MD5 72e073d44307345d2329c49558dc43e0
- SHA1 ed7c28559c510ef45f330fc979e96b4e62d5f3db
- SHA512 140bb92165108ab962005d00ad2ae0f771acdd5b3648e3222dd71c4ecd3cfc7d22c2fc1dbb270b1a53d22c7c118ad8ccc2f840a7eaabe0b7fcfa811ce259501b
- SSDEEP 98304:tb6FR4hcf8ymjEg2tZtQj3lWqloTFVOAqT9ZZckCvxgUTRKdOAdvuL:teR4mfD8W/FHCCvxvTRK9u
- TLSH T10E36332AC79C67336C2A36FE7DD147CB093CF14B4E5F628EA48429EE3C499892563471
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KryptonPlus-_minecraft_.jar
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
KryptonPlus-_minecraft_.jar
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target KryptonPlus-_minecraft_.jar
- Size 5.0MB
- SHA256 13f6a610e6be5a5f8f91a7022a7f65f95ce143a3258b23fb76f80bb7baf261b9
- MD5 72e073d44307345d2329c49558dc43e0
- SHA1 ed7c28559c510ef45f330fc979e96b4e62d5f3db
- SHA512 140bb92165108ab962005d00ad2ae0f771acdd5b3648e3222dd71c4ecd3cfc7d22c2fc1dbb270b1a53d22c7c118ad8ccc2f840a7eaabe0b7fcfa811ce259501b
- SSDEEP 98304:tb6FR4hcf8ymjEg2tZtQj3lWqloTFVOAqT9ZZckCvxgUTRKdOAdvuL:teR4mfD8W/FHCCvxvTRK9u
- TLSH T10E36332AC79C67336C2A36FE7DD147CB093CF14B4E5F628EA48429EE3C499892563471
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.