1a0e5f094665abae97884e6b55d42cbf827fc790743491e2527e9c85347f4fc6

Sharing

Copy URL Twitter E-mail

General

Target
LabyMod-1.8.8-v7.rar
Size 8.5MB
Sample260723-ahgpbsbl2y
SHA256 1a0e5f094665abae97884e6b55d42cbf827fc790743491e2527e9c85347f4fc6
MD5 e1a8bacbafeb7f4052dba700cd0ab835
SHA1 73469244d1d41e79396ccd5b35a20ae1676c2b75
SHA512 5a141bda3c50f64b196ff9a50b845ca01b2e0dd2c33bb09e03c4a6a05256c2d432059dcaa3693a4dce442465812d0ef25308878c20c99e37bbcb4cfe5dae9ce1
SSDEEP 196608:jfZzGJc6XB6zAZSwD9wYAM0LwVOU0b+ezvw3jsV74NeusySysjfk:tzGJnBzD91NJc+ezvYAV7q+k
TLSH
T16796333899503FC6E250C6BAAB88C76F9D8050569C2DFC4B3EF274176F495EE85A30B1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Updater-1.8.8.jar
- Size 12KB
- SHA256 7dc9725dead53a52dd6088c8a901748ef4a7e00819d74ce063060541e0736a6d
- MD5 dbb46edb6002c6d4ffb8785c3ed4a73a
- SHA1 e5f8a17185e41447fcc9b14a63703a6daaff2f4f
- SHA512 5b13ae27a87be5ab7d296acbccf96f4390782f6eceab1c626b6818a04aa085149bc25b4367b83ee0f76243304adc8251cb1313558e660e33a04a2694bad30bc2
- SSDEEP 384:HEQFgTV1/l734UfCGwiAA31Aj5Uq9HjuezjkCpCfjsX7S:HEQF41/FHf0A31mvrsC0jsX7S
- TLSH
  T1F942AF16FD84A914E6A284FEF086E621FD296945B50A00170F345F393B727DA0E7F14D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  net/minecraft/block/state/BlockStateBas~
- Size 3KB
- SHA256 af2a0d209140f5498e3484d3072c58dfa93262f7521868c8a4955db487d9f3af
- MD5 cb6a3245b92b549e03bf4104878ca35a
- SHA1 8faf1f87db571382f4b58d24fbd1b79fd25ce6a5
- SHA512 0486f79608e8b9dfab8135216b8cce24f150827199ef6a78e92f0c9131a037ffe975e81519f527351a747a78299c352e10b376fb0a0f7b4d9e71ad53499c76ba
- TLSH
  T1B0610E8D75EE5940CEB5A328DE0A92E0FE27007B1BE932D5BD8EC7246F350059176E39
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  net/minecraft/client/Minecraft.jav#
- Size 1KB
- SHA256 b5c43eb27eb12905f27b563407c218a29ae982f5d9e9c2868d054a8d6cf900b7
- MD5 f6a76ef9a883916db942f8b108ad749e
- SHA1 dca6adad3b1549b3af584d934bc718886be272b5
- SHA512 d5d529b94790801fa95c060b529ba99526a6d8de79880fcce34adb97427763bcd91e2f89f590b87b73825fa40bdaf9399c2d395a5353b34d1760a8e94d46d0a4
- TLSH
  T12C2123BAC65C4C028573B3AA4C12C0E2E523A6B74E87169A7A4CF6F01F7C5B58526D6C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  net/minecraft/client/Minecraft.jav~
- Size 111KB
- SHA256 58c0d0cabbc449b8e892574776e847f50bc1ff5031f7c3f3d149717ef73e4aa3
- MD5 12776f5a4d85bb5fc785a9fac878b816
- SHA1 1754d2b2353776b7c1a979ee9d46122f461bf035
- SHA512 8365e99a3061654c12ab9d2bb07e082c1cc25d9ae4c69baedd00ec3661cdb11846acb9d7662e96d5e6d6df2ff848d5a6b69399f2c8c0a77ff4f257fb11f8245d
- SSDEEP 3072:I6PK4QeucpZHX6r2K4LH4UKdQMXbCXw0cI0OeyimR:I6PK4QeucpZHXRH4UKdQMXbx0cI0OeyX
- TLSH
  T189B3C987D2DD1910DA36E3259E04C263FB29A42B8F43129CFB4C85F71F7505A9266EF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  net/minecraft/client/gui/GuiOverlayDeb~
- Size 15KB
- SHA256 548a8ea21e0084d07d609dda6b7cb6b9134a076ddb678a33fde3ce790219b070
- MD5 5e39a17e860ada8c5c4dc0b0d1b7eeb0
- SHA1 ab38605150280fa46d11bd51a39a2863f72e68d2
- SHA512 393c4a60586aebc2710775faa3108f3284ab2970fe5ebfae4fd49825eff25b16cb90c683cd906e17b600a61fff7a5723ecbb38416b9cef7f446fc67fbb73d819
- SSDEEP 192:WYwAX8DxNQR5JOovCvtvWYH4AlH9vGvZvJ26jfKFNSnkWyDX++Zn6jxRaZ+dh7UA:USgRNclRSjWyDDZ+dhgB/CLjMu
- TLSH
  T115621E8351DD2CC09976E3466E088565FB24D133DF83259CBB1C89A35F39A4CE13AF69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5
- Target
  net/minecraft/client/particle/EffectRendere~
- Size 21KB
- SHA256 94b4d1e8d34972c3309cb2da5026b3eb71cc58e5d47a3da65eeb9649bec66dd8
- MD5 4be4026002d3b5b4987794cd005d6f9c
- SHA1 62470f48d4ead18faac06945621b4180f9f7283e
- SHA512 ae15180433139ee8f103d87c817faa827ee17f44451bfc562d6b523cf279c936a4fd176b26cbcf735f661aae726839f5e021283c005e0d4400ce381ffc2e8639
- SSDEEP 192:9Zq7bxTK8NNcsvBBIvlcsP8Yk4m0Bfr66GYboMdnVMoplX:/a1OWNcspClP8YrTbxplX
- TLSH
  T1C0A2EDCA75DD6FA35E7AA368AC408190E72784272B876778F11C43763F358A88297D70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  net/minecraft/client/renderer/EntityRendere~
- Size 97KB
- SHA256 5b45840cccb46d31133efb55a1498a029962ac574c6bbe091161b6db1d21d3f5
- MD5 e4146d7c7c38558ec1eb133ca0df7e2d
- SHA1 88258f886b59da216e9de7a252a5cd8d957a8d98
- SHA512 5f1f18e6369ec38ca19bacbefa8b465d45e41a180ac3b47a412361f6502db651ca7e9bcd9f4b8308a8ad92f5f23179ac964ca6df7c6c3a9d8fb2d2aa3b4ac9c6
- SSDEEP 1536:vu8Z2Le/KoyXnicd2dlgJ23GCWVUzwiPfmB8FDwF:soyXnicd2dlgJ23GJQwp8FDwF
- TLSH
  T131A3DCCB16CC18568DBAF359DE048167FB19852B8F475A1CBB5C40FB1F3520A8269EF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  net/minecraft/client/renderer/RenderGlobal.~
- Size 134KB
- SHA256 709cc1a166a8110e133d1acecf6a3558501dfdb45c61bc59b90f5d9f1234d5a3
- MD5 5b4f06ab1d023586945bfb3a121cb0a7
- SHA1 cd1daa48eb78f30a0ac09f818e11afeb4f678522
- SHA512 ba913f9e4ce35de61e3f5bc1c5bdee78c458a0a95b03eae11ce91ba30a2b496632335569bd3c701c78c83459cb6761a6d666a008af1323f6ca7e6f999dab4004
- SSDEEP 1536:Nvr51tY73rFCdMtOtKXitEjExqe4XfOwhuAbplNHnLpRFgYh9ae+8M:IpCEhvXP0AbpLnLpRFe3
- TLSH
  T1CCD32FCB1ADC3D464CB6E36DDE4145A3FB0A40638F8B92ADB74C81B71F35418865AEB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  net/minecraft/client/renderer/WorldVertexBu~
- Size 5KB
- SHA256 31d55da2bf5a785f6e00721c86d84d73aad24df11f14312dd68e46b736547f02
- MD5 d2416a065c1e936cf07d76c79da8c9b2
- SHA1 e79688b5d70b91724d597992980c07fb5fbdb295
- SHA512 55ba07fa16e2928e8cc13158276acfd486c82cf375e829eb77de2d5006e1d4222b1db2d7964f5d825a7314da9a2f4a13006764446704e8079023a909ba580714
- SSDEEP 96:JjZvTFfHc3tNAx34+iTlR1gqmZuh4XRrpd:5mt8UgPJZL
- TLSH
  T1BAC101C21B065ED80C7B936BB9552E9DFF1815B326005747B95C023B6F74CC44627FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral9
- Target
  net/minecraft/client/renderer/entity/RenderManager~
- Size 26KB
- SHA256 aeb973eadffbea0b25acee2d7cc5df5c87248e7f1e5c1f598402de93fab2faf6
- MD5 f7c1ceec1706b0707ccc11fc1af746e8
- SHA1 dc87409678070ac43cd2ea80402d920a8bc868fc
- SHA512 5943d8813d6867b47b84b35dc6d901c1823114947b3c48d5ffe74b713badd850ce2faaf6a7821d1d7d55d13a9d289369e508eef9f93d3ce29606fe2c093493f5
- SSDEEP 384:+yRpwvSIXtJVrzt+JT2B98gt/1f3mZTEX82QiSnMO:h+KIXtJVrzt+JT2B98gt/1f3mZTEX8eO
- TLSH
  T17FC28A8682DA3E706072A347DD109861F736407BBF0B2BA9F36C53BA7F744909129F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  net/minecraft/client/renderer/entity/RendererLivin~
- Size 27KB
- SHA256 1fd43ea087c7246d3c7625165d5958ab8674abc5cc6102e3b7cf8b3a5ecf5e4d
- MD5 98979257dc4aecdcf53925ebb85837f7
- SHA1 e507f84efa9c74493254dd81b13128aad0b684ed
- SHA512 83331ed806e272ad4edb57431d38aafa0cc9ab841e44fe9b6cc31f845f24028674a5f95505953daccb3f33bde1864caa146cafc6386325badc2cc8532a9c6d06
- SSDEEP 384:VHR3HF4IMiEepS7+sE1Rv25SfaNMnChg66LByx/9IGqdAd+9nl3ruvKM:xR3HbpS6Rv25SYhN/9IGqI+9nJUj
- TLSH
  T156C2AF8E1ACC191A5DE7F299FE18427BEA2908336F86670AF7CC427B5F3040C5795E64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  net/minecraft/client/renderer/texture/TextureManage~
- Size 5KB
- SHA256 031ae5b02ee93a337242de069a3199a11d50166f95646364e8da4ff99072f1a0
- MD5 4d12d889ff2cdc5b2c8984f2d2b66420
- SHA1 c72d7cf5484c23ef7bc98a4daccd5a62ba791d28
- SHA512 a34672cb8fd57305c8e0c990cf05964be1a7ac3e0f8abe3b2aa7d01b54074e20e561ebd7ea30505ab69f226cfff878751c69b43084d7bf5c98266492df59ec5a
- SSDEEP 96:JGf0vQ74TKlEjK0O4MIhwkQsHuoOfc5upJgFLGBWvGmkQU:QH78TOoOoF5KuFLGBW+T
- TLSH
  T1D1C10046C9DDDBA29FB36743CD01A281FB360227CA5596D8BDCCA2B02FF80945266C25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral12
- Target
  net/minecraft/client/resources/ResourcePackR~
- Size 13KB
- SHA256 5c2d1ce48dfb2d91ade3c31add8c890a6c8c53e4e8407db3a1ddc17205d6972b
- MD5 be9e1b0b666312b644aac7e6b74c6777
- SHA1 e59ff7fc1c2876eef85a002cb093b6a596f95f9a
- SHA512 760db8bd97802295428a89a10c7dab49f6582dc959a7ad5cae477830b3302fa663d48623eee1f335eee353f06d26539d65dbeac15ffc4ffe8d10101773e8d7df
- SSDEEP 192:3Lsj17WIcv2eQ7MnCmX/fYTy9yZUlU0gD95Yyj4DAU6Yv2QCnoG:siLvNtnCmPqyc95cXHuRj
- TLSH
  T19A5255C659CE5E50C8B1F3A99E019193FB269027CF0A22A4FF0D42B52F7198195D4FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  org/newdawn/slick/data/helvetica_svg
- Size 21KB
- SHA256 10a55f013f0a7107776b05152cf930df5457a8b0084e3bab5ab01e9a7bbf3913
- MD5 f0642d131f6cfd7b5bdfe426e87e815a
- SHA1 77ecccfcfef243984de536c5348ad9e740e6c1ae
- SHA512 2fbae37594cccd2fd09a90b3147296c155f28b619d3f68e7bb2ced27fffda6a46b96c4fdd9e43dfacfd11ad0bd72bf2109b3f0beaa772334477f7ed4431cfbb4
- SSDEEP 384:cgFZDJsYAxNpmADT/UrAJFB2hMKHMtTJFYRovoqNIlc:cGJfypjTmLixH0oAqNIlc
- TLSH
  T1AFA281FDD1455ED01A9AD7D4EA9078AD485E437FA1232CB18D0AF6F6081F66CEC0BC58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  org/newdawn/slick/data/package.html
- Size 177B
- SHA256 40e830dc232b3195e65b1af2056a477a5d612b2555c151d38d96d2a33172c479
- MD5 88db7bea0550b226724ee7b9c71fcadc
- SHA1 5b7648d4aa095d69c045e386327939197cae1684
- SHA512 eb822919d3bb6c4f830f913fa0ba7e258052f0ea5158784e3b951db13164068317a0fcab6ebde808e47b2e4b5834390aba269a06347db4603382ecbc42f12569
- TLSH
  T1F3C01259B6DDA79492525690B9460116C639F25C33237504599700F9149D045C3636C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15