03c348339bd1942edb7fff332b3816e7698d8d46f632fafc2350f2783f78bd9d | Triage™

Login
Reports

Overview

overview

9

Static

static

3

minecraft.exe

windows10-2004-x64

9

minecraft.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
minecraft.exe
Size 444KB
Sample260828-q6dwcaydrb
SHA256 03c348339bd1942edb7fff332b3816e7698d8d46f632fafc2350f2783f78bd9d
MD5 d4b0cb5e0a62c6092b2190f8c3a89649
SHA1 e9d746a3283837d3e0ab60d5ea73006556ab3882
SHA512 4a19a3ee94cf488eee6667d9e593564ffa66b8f2f267be1ec60e746f8a7672a42c8dec98915c5e244a44beac5529d016c2f5b107cd833ab405885d90eb6e4fb7
SSDEEP 6144:tDo/AuAW6GpZ0RKP0AzPWzQ3z1olBsTa74zb3QBv:popZ0RKMVmfa7Fv
TLSH
T1BAA47C6AE35544F9D26AC13486978521E671F85D0711EBEF13A8833A3E26BD06F3CF60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery evasion exploit persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

minecraft.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery evasion exploit persistence ransomware

Behavioral task

behavioral2

Sample

minecraft.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

defense_evasion discovery evasion exploit persistence ransomware

Malware Config

Targets

- Target
  minecraft.exe
- Size 444KB
- SHA256 03c348339bd1942edb7fff332b3816e7698d8d46f632fafc2350f2783f78bd9d
- MD5 d4b0cb5e0a62c6092b2190f8c3a89649
- SHA1 e9d746a3283837d3e0ab60d5ea73006556ab3882
- SHA512 4a19a3ee94cf488eee6667d9e593564ffa66b8f2f267be1ec60e746f8a7672a42c8dec98915c5e244a44beac5529d016c2f5b107cd833ab405885d90eb6e4fb7
- SSDEEP 6144:tDo/AuAW6GpZ0RKP0AzPWzQ3z1olBsTa74zb3QBv:popZ0RKMVmfa7Fv
- TLSH
  T1BAA47C6AE35544F9D26AC13486978521E671F85D0711EBEF13A8833A3E26BD06F3CF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery evasion exploit persistence ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexploitpersistenceransomware

behavioral2

defense_evasiondiscoveryevasionexploitpersistenceransomware

© 2018-2026

Terms | Privacy