c5c4f4d233b522c9be1bdbde055cd53592abaae11317551dd942f83adacab9b2 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

minecraft.exe

windows10-2004-x64

9

minecraft.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
minecraft.exe
Size 443KB
Sample260828-ractvaan61
SHA256 c5c4f4d233b522c9be1bdbde055cd53592abaae11317551dd942f83adacab9b2
MD5 23b0ee473d5ba8f0b51e4078c82be759
SHA1 b789d0733a54b68a59df47d26c0b343c1e653d3b
SHA512 d4c4caa2b3990062b078c9f0c81945d52ecab82c0967586dc76534e23050dfa041b2c42b4785af883c259612a5390f4c573e402521d34e71ad4e25a495146479
SSDEEP 6144:XL3hUL1WUcCiHqOxi9DD70KYAwpGblhRGGxVIRvzjrWj8gh:sRQqOxiN4n/GxG9y
TLSH
T176A48DAAE75548F9D1A6C174CA528621E231F81D0711DBEF239843367E26BC1AF3DF60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery evasion exploit persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

minecraft.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery evasion exploit persistence ransomware

Behavioral task

behavioral2

Sample

minecraft.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

defense_evasion discovery evasion exploit persistence ransomware

Malware Config

Targets

- Target
  minecraft.exe
- Size 443KB
- SHA256 c5c4f4d233b522c9be1bdbde055cd53592abaae11317551dd942f83adacab9b2
- MD5 23b0ee473d5ba8f0b51e4078c82be759
- SHA1 b789d0733a54b68a59df47d26c0b343c1e653d3b
- SHA512 d4c4caa2b3990062b078c9f0c81945d52ecab82c0967586dc76534e23050dfa041b2c42b4785af883c259612a5390f4c573e402521d34e71ad4e25a495146479
- SSDEEP 6144:XL3hUL1WUcCiHqOxi9DD70KYAwpGblhRGGxVIRvzjrWj8gh:sRQqOxiN4n/GxG9y
- TLSH
  T176A48DAAE75548F9D1A6C174CA528621E231F81D0711DBEF239843367E26BC1AF3DF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery evasion exploit persistence ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexploitpersistenceransomware

behavioral2

defense_evasiondiscoveryevasionexploitpersistenceransomware

© 2018-2026

Terms | Privacy