Overview
overview
8Static
static
1THEPAINTIN...1).zip
windows10-2004-x64
3THEPAINTIN...1).zip
windows11-ltsc_2024-x64
1assets/min...es.txt
windows10-2004-x64
1assets/min...es.txt
windows11-ltsc_2024-x64
1assets/min...ns.png
windows10-2004-x64
1assets/min...ns.png
windows11-ltsc_2024-x64
8mctools.json
windows10-2004-x64
3mctools.json
windows11-ltsc_2024-x64
3pack.mcmeta
windows10-2004-x64
3pack.mcmeta
windows11-ltsc_2024-x64
8pack.png
windows10-2004-x64
3pack.png
windows11-ltsc_2024-x64
8General
- Target THEPAINTING by MCTools (1).zip
- Size 1.3MB
- Sample260729-jwjkhs1vb1
- SHA256 9feb2ca77d5927fd72422ec6a83d0a67b8e6c986d34820965211da337db9ed09
- MD5 69f0fc0d4e033c98eb73e1e2dc447c25
- SHA1 18b9dcf4604da8a8d65db5c7d8830d7215f3ad81
- SHA512 324604382770dbd6c901702c50b3b76da73eac6e77f2ad3d56591df866809c5daf26630a29e541cd456947115d26b3a51bb7e0107b3f5a925d9a942addcf8797
- SSDEEP 24576:Xqfpp0BxxHluEhds/Y4fPasgjOCufNIX+lhyPyqg8/cAJ6dsZPb:af3sluEhG/xPaENI6hyPOyc+ssZPb
- TLSH T1145533F08A916BF2D7A78C63E3C3D4A770E50637FB4C43119376E9AE4909382D566E06
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
THEPAINTING by MCTools (1).zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
THEPAINTING by MCTools (1).zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
assets/minecraft/texts/splashes.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
assets/minecraft/texts/splashes.txt
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
assets/minecraft/textures/painting/owlemons.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
assets/minecraft/textures/painting/owlemons.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
mctools.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
mctools.json
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
pack.mcmeta
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
pack.mcmeta
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
pack.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
pack.png
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target THEPAINTING by MCTools (1).zip
- Size 1.3MB
- SHA256 9feb2ca77d5927fd72422ec6a83d0a67b8e6c986d34820965211da337db9ed09
- MD5 69f0fc0d4e033c98eb73e1e2dc447c25
- SHA1 18b9dcf4604da8a8d65db5c7d8830d7215f3ad81
- SHA512 324604382770dbd6c901702c50b3b76da73eac6e77f2ad3d56591df866809c5daf26630a29e541cd456947115d26b3a51bb7e0107b3f5a925d9a942addcf8797
- SSDEEP 24576:Xqfpp0BxxHluEhds/Y4fPasgjOCufNIX+lhyPyqg8/cAJ6dsZPb:af3sluEhG/xPaENI6hyPOyc+ssZPb
- TLSH T1145533F08A916BF2D7A78C63E3C3D4A770E50637FB4C43119376E9AE4909382D566E06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target assets/minecraft/texts/splashes.txt
- Size 278B
- SHA256 b7823c9e5ab120978619dad74c27d7c4b5d3843ccf4bc4f82fee7a0be1389764
- MD5 e81e5d31a187862feb478cee7c51d737
- SHA1 72166efd44c95a265aa737d9f1ac7020ef259a58
- SHA512 a89f5405057eb035bedd3b685129033dbdc985464aff8049da12e69c9c4424d88eb2812c21c4f4ec819e87274e387a4ad23df8ffb8f27ccdfa889b8abf1c2abf
- TLSH T1B3D01243947A32E0EF5FA9594EC290016BC37DC936EAD180B4EC8215614D43F3C05655
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target assets/minecraft/textures/painting/owlemons.png
- Size 1.1MB
- SHA256 5d52b39827537b12819db41b5e4c840faabc80d942bd45735299114498888e74
- MD5 302f8c760d67c601077e71397bbde133
- SHA1 609437b257db51b86bb0fcbd9cb403dad1beb2c6
- SHA512 29866af45342480518d6153a62fecade75c52fd01f05ac28dd27376a10bc39b4e4960a96868736225e45f85f4af4d91dd2604d461567fd0439d747082829ccc9
- SSDEEP 24576:eBxxHluEhds/Y4fPasgjOCufNIX+lhyPyqg8/cAJ6dsZPm:eluEhG/xPaENI6hyPOyc+ssZPm
- TLSH T1CA4533F447916BF2D6A78C46E3D3D5A721A90B33F74C0362833AE9AF4905382D865F06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target mctools.json
- Size 376B
- SHA256 167a4fb444c16fe3fc7d2313902b2bbc84e6c3d702e69080fa06aaefe248e8d0
- MD5 656baca5f0f8ab6dd36e9045b83a712c
- SHA1 e889edf9722664d93c23bc7df2ef87c1b67405af
- SHA512 b07cef521c1447518a54a301fc6f0d420bb2afa51326d1f572b275e155ca60faef9c4295f019a08f7f7ad819ed44248d77daabef1d6a9550e50ec8bb2785932b
- TLSH T100E0DF65E8A01E1714C0E1F9089C06431CA6CD6B1E857948730E089C4F5C86F71B663C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target pack.mcmeta
- Size 212B
- SHA256 d041e894c6be12bddbad905c48dc20120347035ddca6f4d0327f39ddd17e4759
- MD5 0301d115a1f5beeda091dad80800d3b5
- SHA1 964264672aa2643a928834b5ac38b57fd809283a
- SHA512 88e1a28c107f7c59643e26a4644af536ebea8c1bb165cceff2a32657d4402cb1ef455fca729df0d799aae09fca4341ed515fa35bb545281859f8c536c1bf3e20
- TLSH T114D0C7F4D5600D334089516518FD43035B59519755C5AD86FD88085C4F05D9CA567717
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target pack.png
- Size 162KB
- SHA256 756a40b4cc174f5a809a64921b9237e60fb7be513cfbddc54d06fd333a5b87b1
- MD5 dd3c23aae18bc1cdd7ef430f2399723a
- SHA1 36a06d7ef50c964bfdbbc080e72614787b88ada0
- SHA512 0f62739ca796f12494ab67fcd591c5d32efb198946555b601fa8c70b1974fe3ff36bfba410cb4487a596421540be80e61aad24110f6379fbf8fd1e60b5e44492
- SSDEEP 3072:TPdtOoh9qyFmrkPG+evo3PAMf1jtBRN7yQ1KBd4f4bOv5mmj663xY3a7IgiGKXXQ:TjOTyU4Y2AMtjtt/QBwhmc66hYKIgiNA
- TLSH T1ECF313C1DCA1D5F4EFAB687399C8E9E2F0E5008F5F6566009861DD9A624DACCC377423
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.