d51efbebc841588453d2b46a06058c44b1b7925eee052e2789cdb840dae6da17

Sharing

Copy URL Twitter E-mail

General

Target
LegacyLauncher_source.zip
Size 25.1MB
Sample260723-n8evbaaf84
SHA256 d51efbebc841588453d2b46a06058c44b1b7925eee052e2789cdb840dae6da17
MD5 e311b4084bb62799668bcec336ca12d4
SHA1 e276ba6a90a1125e56d10bf44c6b877eea703676
SHA512 cbb8ac64db4406ae1c7be44314d5bb48a22d56b7bb58554161f75f480f47aa05d5ff4e0eed1ebf0edabf5b503d8edc90a61b71da8dda5428cb7fadbd5b692734
SSDEEP 786432:D5apHz9cTVYr7kvnZRfQaGcbPRdI4qKBz:VezKTVEiYzcDD3qKt
TLSH
T144473356E13A7CE2C222837A340D41239644863075196F7E35BC7B616CAFE6DBF6638C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  buildSrc/src/main/kotlin/net/legacylauncher/gradle/LegacyLauncherS3UploadTask.kt
- Size 6KB
- SHA256 d52e32cf73fb98e0c4cb680ecf7ec41bc2e6f6d627014cbaa4520009dcc87dab
- MD5 d728803859f3d069d358f94b2dfc042e
- SHA1 1353275a5fc1489dd684c7e067d9fa464a42f3c1
- SHA512 6d82e176d33910a9897e0d092ff01c748da14fd59746e4845e2ad2926117c6f079d81324fbc4b7d436e643597d5e3523fa665e35352fc5ee4e8ca72ea525be38
- SSDEEP 192:dAMSvatlII2ledlblonl2lllpJLlOkyGjmT3lMRSQ+b4CheCymUZzGH/HR/5GL:flYlmlblil2TlpJLlHyPt2yk
- TLSH
  T19AD1572AA1E640F18BC721BAEDC91821F1A5925F1A343474FF8C43619F49919CEF1BF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  gradle/wrapper/gradle-wrapper.jar
- Size 42KB
- SHA256 81a82aaea5abcc8ff68b3dfcb58b3c3c429378efd98e7433460610fecd7ae45f
- MD5 5b3da2d857848551bdaf3acd7e3129b5
- SHA1 4f4ad32658d8704946d21f466aab413fe3f71012
- SHA512 89013d1b865d1cc6e713dfdaa3148536ff7ba08292c8aca35d8713d2151ef60df57f8ae3102e63ea43e89ba23b774651cd472a37a092ad6ae42450e61959bec3
- SSDEEP 768:u5pLEzX/yoYUkDlXyWZOOkPjARh6em+6XIomx8B6o95Bk:mpLEzPyoYUkZDZOOQjdeo0x/otk
- TLSH
  T1EE13AE6D6C589029D147063F1477C6959276C34A048DDB3F06B5278DCFE079B8B2739E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  gradlew
- Size 8KB
- SHA256 734b3879d3501dce471cf0522d3bcbafe76873d9fc5129345b67fb43bd15e933
- MD5 1b55ea5b0e5fc1eb95371fb67272795f
- SHA1 cb0d02c2006864c8233085e780a4842d45a539c0
- SHA512 d7e4e2a29b3a9a17b551e6ae8069508e12583bf72118c6fae9ff2293d73a393d9f1810c6fbfe9585c902cc5b21800df89e89f862391f74431e7b48ce5a22c7b4
- SSDEEP 192:SyWm7H8yzJ1XnRy2305hI+vcHD7oRDe7PRe5WW:S/m/zJZRy6mhbFRKR+9
- TLSH
  T124020A6357812374074506776E9FB0EEA72162BF1F83291C749C960C373A93A61F2AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  gradlew.bat
- Size 2KB
- SHA256 57931b17dd228e5c24dac90e815d0bf82477e831a4618dfab4136f5446b42a9f
- MD5 7be26de1fd6e5461efac65d3a4cd272f
- SHA1 f6334c7d62f27d3e1af81f5896e30aeeebcef324
- SHA512 22ddf288b2ead5bc115299982bb002fef5bf85114d2f4878104a1dde6f9366de1e6c68f2fe406bfa1f554133c71a7593b0915a3a2ed4a14a24349e982247d0e3
- TLSH
  T1F45155BB3B4742761F7C27AABE1C4582B612A2662F4BA30CB45F450D713174A51C2D9B
- MD5 SHA1 SHA512 TLSH
Score

8^/10

discovery execution persistence
- Downloads MZ/PE file
behavioral10 behavioral9
- Target
  launcher/images/logo/discord.svg
- Size 2KB
- SHA256 6c99758cd85affd745c7f4c4453e8cb91ef3446b62196252588ff53d15de7699
- MD5 6e0efdb0f31ff6640ed016cb46a31541
- SHA1 7ca9c06d156c93e05e624d5351dd01efd921291c
- SHA512 cc512963912fdf2e16c7402a64635e9867e8fa6d4580d4110605a3d1c48d717f426cba9b6db69bc7c87c7e412dbe0dfbf45cf4e559ba470a15db7b6792f0ebc2
- TLSH
  T173515099F17B55CD860C46516DE22211870FB0A7F3990E257EAD88B0DF064D2F37BB86
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  launcher/images/logo/duke.svg
- Size 5KB
- SHA256 cfc89ed68a82534ddf4537f2972cb46bc019049e3354cc6bd3772267143c7327
- MD5 b21668596abbc588a5b7807e7dddcc9a
- SHA1 624880eee51fc207746626fe76c1d2b2e13ff56c
- SHA512 75b4df35ab9dfdf9a7b3647e016866d61973bf93d0f7fc4254de387ca136d5917f98ce8d2f76021fd8630a97fe2706ce7a0d4a5b280ac8180c51bc24b2e4925a
- SSDEEP 96:nk878IV0QbFv40ZBJa79jr5CBH4NDz0ZjpOHwKjOOsBCjP9Raq3A1Vn:nky5ZvHBJahjrcBYNn0tpOQKVsBG9MqQ
- TLSH
  T1B3B197D0C26858F6916D833DA9F1221B527A30BB32848E04F7EC9F58EF919D1721D7CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  launcher/images/logo/intel.svg
- Size 3KB
- SHA256 72fcdd52bf0706e940e45d1b5c0c50873a3a6ecbc03c65679ff27974f82b1ae2
- MD5 40ac3bc7b762459a6003367ac9b2af4d
- SHA1 95e2b5e21633a90463ea0bdd77515aed47090c6e
- SHA512 dd49b6b965cdeeb8a6077e29b15f7da7b397fa21fc4e2dab9dffb6f9f790c230c75eb48fdb9152dd3505f79f057911ade7b91959bfa8348e360bcd470dd7ad82
- TLSH
  T1E36197BDE21509F4866D421468E11602610C64E3D2E4BED4BBDE1460FF344D172F87ED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  launcher/images/logo/mcleaks.svg
- Size 1KB
- SHA256 77f8941a08bcab17a63118baae1c3154ba66d8bdcc1d0cfc3f306ff2e3b4e174
- MD5 e8dae81a4fdf600cb31d5cf37a670689
- SHA1 8350c7c64a0bc146af642988a133b4cfad669cce
- SHA512 a88e7017ddf2990913416173fcb9830d5c6e60c8f628c2a7d46f090b1ce5541751bfb57ccd36c959f1bfc8b8e04949cc1f22b3a4dd6f2ba96d5f5849ec3d8837
- TLSH
  T1B94153CF92BF95FE1160AD2A58221D1276A26FBC321B49F437B6C4743C4C6902D35D86
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  launcher/images/logo/microsoft.svg
- Size 1KB
- SHA256 cc634117206538fff9b5e76bdc63a5059698a266610566372ad65c37882fd457
- MD5 2d9d7e5ef4b3d85474ff250fc4a05413
- SHA1 9779afc7009cc82b7b2487927bec92439df36fa1
- SHA512 b21f62934a69994edd13d2115dc68e8ea1f411936a0f927e5f5325285bb3e2b9ccce533d6c29cf0f1456686e28940e3f1418078726093afbe289569c366ae2f3
- TLSH
  T1CD41F08AF1AB58DAD21C82143DEAB912C31970F382844C2A7DAC54A0DF495C3F77B3D9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  launcher/images/logo/mojang.svg
- Size 645B
- SHA256 c33dfe1e9660e592a51208833b94a14f7d5743a1acbb17bc4c0d92de8114b23d
- MD5 69f60bf2414d8ebd7792d402b13f1a9f
- SHA1 f91301c65421cb923b60a0080dab337ce3069f2c
- SHA512 62eb5144f7dca0248fb0b7412a4ec6fc11173baddce375890ecc9ab0259118e79b28a97962202e0eefd0e0d30fab36bcfc4c98355323f3f624b0a952625dddc9
- TLSH
  T180F023D5612421C8CE8BC6A1EB74D188402EA1D9E6E910C438CB8214E8C1CC3F840EA8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  launcher/images/logo/twitch.svg
- Size 2KB
- SHA256 52f3dcfa89e2dc64a9f7a922f34980c4fb221945c86873c9ef9af59416c83cac
- MD5 8e7e38e2028158047bae152b27fc89db
- SHA1 e58c35d798e82fd636eb49af3f364cfd416b0d8e
- SHA512 e82a6152108482413fac0b9d039b8e7086146fd609f111a3ef768a1b9a95b0941c294b797ee454322680195c0b58c115a498e3a5a31b5198ea3196883e40a036
- TLSH
  T1B9412241E06A58DDF22E82552AE2794A831D3093C3CD0CD17DEC5860DF489C1F3AABCB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  launcher/src/main/resources/net/legacylauncher/minecraft/crash/signature.json
- Size 37KB
- SHA256 26e1d73085bbeeef305e6197c269001917782146f0ada3bd4b823375c158c976
- MD5 b6b3892d70087d721b861dddf30b771b
- SHA1 552a5c99a788689629b2d79c836f99a3e98d49cc
- SHA512 967ceb2f8e0d3748c3d677aff5207d04989f7e8cb57b3f17cf1a4692b9223cd00748252a2f25fc333c6fdaa00a9dbfac45f513bd43d8222bfaace1911c74076f
- SSDEEP 768:PqN/DtfnrbUtUKSu/F316vumTyTiTdTcVW2zNQNlXUyrc1:YtC7Sq6vumTyTiTdTcVW2zaDXUyY1
- TLSH
  T1EC032D75C5B92CE3060AA069881D6486B8B140FF1FAD7E09361C265D2FDF16E50BF39B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  launcher/src/main/resources/net/legacylauncher/ui/settings/about.html
- Size 756B
- SHA256 46bc420ab725e09f1a18e0f79c6e0eb4e40c8af91c042d4c8c7115572e752845
- MD5 53d92bd2f5966843e05332f493653cf4
- SHA1 3042e3008ffbf7b146350d41abf2a9868941aef5
- SHA512 7d134f7af768a0ea46f9be415bdb0c7b9d5b756694e627bbc87a3e045be59780048953c1f6200c7f54fc98549ce0e4562a925ab935e8ee0c21a974231756a162
- TLSH
  T111017B6ACBE79206444744045F152A891DB192F7D79ACC987F0E43F6DF8C4811A472C9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  packages/dmg/background/create_tiff.sh
- Size 212B
- SHA256 2f5a3a36a884606fa36cd72fe35bd5699b65ec3b84434a1ef03e6c40f7867d13
- MD5 74abb8bb6ea126560576f183c473b365
- SHA1 e212eadabc9fc23c2c12ec7414610c58a7c9f39f
- SHA512 66bc5e2661de8223bfed4a9d062d7ba112b69c11707d33fdf35708cfa7d35ac54c65efee7c4f4cc60d87d363f59fec17eb2d4f9e635ad1de1422c0b9aaa82989
- TLSH
  T193D0A75518803D2C314BCA3820B1928CC0B88454FA941A7CA41D7AA140A5FD4812B1A8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32