General

  • Target
    THEPAINTING by MCTools (1).zip
  • Size 1.3MB
  • Sample260729-jwjkhs1vb1
  • SHA256 9feb2ca77d5927fd72422ec6a83d0a67b8e6c986d34820965211da337db9ed09
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      THEPAINTING by MCTools (1).zip
    • Size 1.3MB
    • SHA256 9feb2ca77d5927fd72422ec6a83d0a67b8e6c986d34820965211da337db9ed09
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      assets/minecraft/texts/splashes.txt
    • Size 278B
    • SHA256 b7823c9e5ab120978619dad74c27d7c4b5d3843ccf4bc4f82fee7a0be1389764
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      assets/minecraft/textures/painting/owlemons.png
    • Size 1.1MB
    • SHA256 5d52b39827537b12819db41b5e4c840faabc80d942bd45735299114498888e74
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      mctools.json
    • Size 376B
    • SHA256 167a4fb444c16fe3fc7d2313902b2bbc84e6c3d702e69080fa06aaefe248e8d0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      pack.mcmeta
    • Size 212B
    • SHA256 d041e894c6be12bddbad905c48dc20120347035ddca6f4d0327f39ddd17e4759
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      pack.png
    • Size 162KB
    • SHA256 756a40b4cc174f5a809a64921b9237e60fb7be513cfbddc54d06fd333a5b87b1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks