5e9d6570c976740be31a93bb2502e99756d76ac72d2cb56a14da87d4d82cec17

General

Target
BetterSurvival-fabric.zip
Size 6.7MB
Sample260823-wbqvbayeph
SHA256 5e9d6570c976740be31a93bb2502e99756d76ac72d2cb56a14da87d4d82cec17
MD5 6f8d3a17e28c4a61a97412e5c341a66d
SHA1 49d4a4e8a12ae939c00348008f11e889cbbb72b3
SHA512 03998a2f9f925e610f00b72fe84bef5e39f8ded446119030292490f72b87deeb8cb1f7d93db031ef0d0c832d655a54ed57731907df1e3dc4f5b81dff05224951
SSDEEP 196608:m+ysuwFANKqIoj/SgFzdw7suY1SjDAZVB/cr+dkk2NdzY+gGiSN4:mF/BIo2r7surEZVBfdkk2Dn4
TLSH
T1746633586F074C36FC222179E295458E050FD82A5F78472A29F31B30A79BB64E363EB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  modlist.html
- Size 122B
- SHA256 9421cd0697bed568d85e11811514f5783a2416c36a14468e75b33d4a7beb62df
- MD5 4a2c0ffec7a859050ebfbd69e34874b8
- SHA1 9e4775951a968c005605edef1435f7600315f790
- SHA512 e009b8b71c2b89f0d7d711b2dd104f433240a9c1e2e21ff7d82827b5732a67af940b12b711bfd598ae097de352442c669810124884e89bbe70e5402fcdb2f704
- TLSH
  T1A0B02B72347D7C061714D27D84122B3CC00B90EB0F084FD69121040737402931C05043
- MD5 SHA1 SHA512 TLSH
Score

5^/10

discovery
- Probable phishing domain
behavioral1 behavioral2
- Target
  overrides/mods/bettersurvival-1.0.0-release.jar
- Size 4.9MB
- SHA256 554e853c633ee5c9bd2441a88e4ff01fba8e05a6d60d1ad3b53c85d3b2f5225b
- MD5 d730e8ae9972e15914d1823787e8cd58
- SHA1 5fbeda46e44d79536ac55813598c61a998672339
- SHA512 693762eb32ffef0ecc902201ea42d74d86637ea8457946584ced6401df423ca9b26d4c08ff6e221fa89bbb2dee2f67981953e296cc02df68b15ebfa9eb0432cd
- SSDEEP 98304:7Q+o0WJtVf/FnWXDfR8XNsod0OcFPHcjV1wc2vDHIRX4J5rJYY+0evWwg4D1yp8E:ovnf/YtOpd0OxV1GDL5rJl+0cWwdy6CZ
- TLSH
  T19E36334C55D3581ACACEC13F08AE7A2F46663145F46C174528E805C735AB32EDF8ABAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  overrides/mods/fabric-api-0.83.1+1.20.1.jar
- Size 1.9MB
- SHA256 8319a54a4c8262a1517bd6182e74823e463552c7005b262ac34b96153069a8e9
- MD5 93616b51e3bb4ac62ee674e94e5b55cc
- SHA1 3616f70a677bd680c9fcced41a2117a9f099c550
- SHA512 e1aa8d7a8306750de3dccd4cfec31bc4f642bec2a4480af45d20646f26da5b23a13a63de494bdcc7e6a27f5d5537698ca193cebd729a07e373b821f28d9aef61
- SSDEEP 49152:i/vwYjGKGxv++ZQv8WsQ97dlHODaOLM0S3CjKE4m/f:inwYHkQv8Ws6OGq2UYQf
- TLSH
  T1369533342FD64C22EC13A8F661059A530837B91F2F48FF36587596A593DDE99E3008FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6