c1565e0a1759f4fe20603d031a01708a209c0044826bbbbfb0be5ae3b902e4d0 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

BetterSurv...ge.zip

windows10-2004-x64

1

BetterSurv...ge.zip

windows11-ltsc_2024-x64

1

manifest.json

windows10-2004-x64

3

manifest.json

windows11-ltsc_2024-x64

3

overrides/...erties

windows10-2004-x64

3

overrides/...erties

windows11-ltsc_2024-x64

3

overrides/...erties

windows10-2004-x64

3

overrides/...erties

windows11-ltsc_2024-x64

3

overrides/...u.json

windows10-2004-x64

3

overrides/...u.json

windows11-ltsc_2024-x64

3

overrides/...s.json

windows10-2004-x64

3

overrides/...s.json

windows11-ltsc_2024-x64

3

overrides/...ap.txt

windows10-2004-x64

1

overrides/...ap.txt

windows11-ltsc_2024-x64

1

overrides/icon.png

windows10-2004-x64

1

overrides/icon.png

windows11-ltsc_2024-x64

1

overrides/...er.jar

windows10-2004-x64

1

overrides/...er.jar

windows11-ltsc_2024-x64

1

overrides/options.txt

windows10-2004-x64

1

overrides/options.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
BetterSurvival-CurseForge.zip
Size 528KB
Sample260828-xzbwqssemb
SHA256 c1565e0a1759f4fe20603d031a01708a209c0044826bbbbfb0be5ae3b902e4d0
MD5 3f5904d28bb060ebd245ab38cbd457a3
SHA1 c32f1e22fcf0a91f3ebcbc179d10b1548f630324
SHA512 fa49007a74debc0ff2e3535e41e925d72ef6b1a74ab107e1a2a5ab4d9d5b1138620649a763b66d27150eb36c5fc764eab2a3f91ffadee7900c3b7dfc27b103f5
SSDEEP 12288:Gfb/fPhj2w8YiVJ3zFih6SjdfXkrPeb+5VJXPJUxeu:Gfb3Phj2w8nVFk6u9I2CHNQh
TLSH
T1EFB423058B19DFC5DC21F1FAC85AB934610BBE5FE7562A31B8E093F1850DC2E4B90B91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

BetterSurvival-CurseForge.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

BetterSurvival-CurseForge.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

manifest.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

manifest.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

overrides/config/iris.properties

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

overrides/config/iris.properties

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

overrides/config/lithium.properties

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

overrides/config/lithium.properties

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

overrides/config/modmenu.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

overrides/config/modmenu.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral11

Sample

overrides/config/sodium-options.json

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

overrides/config/sodium-options.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

overrides/config/xaerominimap.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

overrides/config/xaerominimap.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

overrides/icon.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

overrides/icon.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

overrides/mods/ConfigLoader.jar

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral18

Sample

overrides/mods/ConfigLoader.jar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

overrides/options.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

overrides/options.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  BetterSurvival-CurseForge.zip
- Size 528KB
- SHA256 c1565e0a1759f4fe20603d031a01708a209c0044826bbbbfb0be5ae3b902e4d0
- MD5 3f5904d28bb060ebd245ab38cbd457a3
- SHA1 c32f1e22fcf0a91f3ebcbc179d10b1548f630324
- SHA512 fa49007a74debc0ff2e3535e41e925d72ef6b1a74ab107e1a2a5ab4d9d5b1138620649a763b66d27150eb36c5fc764eab2a3f91ffadee7900c3b7dfc27b103f5
- SSDEEP 12288:Gfb/fPhj2w8YiVJ3zFih6SjdfXkrPeb+5VJXPJUxeu:Gfb3Phj2w8nVFk6u9I2CHNQh
- TLSH
  T1EFB423058B19DFC5DC21F1FAC85AB934610BBE5FE7562A31B8E093F1850DC2E4B90B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  manifest.json
- Size 1KB
- SHA256 a2d221475547145a1919ef5359a2193e827a4a4387b5d086f7ade3b9e49960f1
- MD5 91dfc2b5979dad8ead4c35bdc89ebc71
- SHA1 a880541a704c7a72de32362ac6648f7e60c6fb66
- SHA512 04e4915267c733d94ffeeed1cdb94a9fc14200adeaeab3dd05ab724789542bac3b38af43ecbdeac4432ec568b0513fb510ee08ebe58e2f5818284e1887ecf172
- TLSH
  T1EB41214CCDA94DB732A0607D052F1142A07A885B0C953DAA766CA0BC1FACB5D5BFD73A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  overrides/config/iris.properties
- Size 226B
- SHA256 a36780099062c141401771f6958662f6d373bb1d9c1bc576a17ef863f5d047e7
- MD5 f8f96b5635c5b4c8c84ba74a709e785d
- SHA1 0eba952faab24709bb90d707b120f2b15513f053
- SHA512 c6a9cc285b10f2d79ece373e021e6e1fdde4b96f229e9efcedec9fe32684fe4aadb58d511826005fc9d67837eabe1e2d3d3a6158d2ba1891c2e208c4435e5a2b
- TLSH
  T156D097C30AC13837E2738348E505A8A3402882B029068AB0A026006C23FA801CBE3844
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  overrides/config/lithium.properties
- Size 1KB
- SHA256 defbefad7b40e2a8902ff096aad10a2365c3bc1148a091998b3421eec8394b8a
- MD5 772a7f3ab5ef54ab6cdddb88a8d1e8f7
- SHA1 0606befb4df6dbd080b694c921a2577af6965060
- SHA512 bc83abce927e2ed459260ee61d475afc3b7d59c3f7d7d35698b686c36a83fd21aca7a1cf3f55762181b6461c4f24d05abaa0baacf5eadf0d71ce970558386034
- TLSH
  T12C41BDD7C7F115BB0AE2535D50F608A0F2248F602B536150DC388E636D295536A6F20F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  overrides/config/modmenu.json
- Size 530B
- SHA256 3a8d57d336378c3acd12096ab8db0752daa002fac2d4b7ae0fffadc50ad99b20
- MD5 ff5ab0f614d25630d2a0631bac57db97
- SHA1 d2a8fd45dafd3e3f2f579e270f963fc4116821ae
- SHA512 fdedfc18a42e7b73acc87fad330c40f455bfc56021b11307e20fdd6b36be1593c31d80afda559acd379dd923d8047047afe4c491e3ba2afee439edfcf5247c43
- TLSH
  T17EF0B470D1BE88B516F22218EDCEB0071F329D5902467D2543871A0A129DB3F32B79E6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral10 behavioral9
- Target
  overrides/config/sodium-options.json
- Size 720B
- SHA256 3a6c9c6ae08653658ac4aa80636a5277d66045e6597190559df907eabe7e5d93
- MD5 c1617c550902af69a286111936d39fc3
- SHA1 82131dae64534219b4ee31ec9380afcaa9d995c7
- SHA512 0a92c778c64bf9588005fab8753b8d42732f5221d9bcf7dbbbe062c4ee1783d73e33311eb0b89cd0eaa2d7add280fcbc4df8d62dbbdb494ec5d9b404f9cf2a9a
- TLSH
  T13D017B62D4FC5C7110FA542018ADE683443145232E1D3DBEB1EA606C2F8E78F267BDE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  overrides/config/xaerominimap.txt
- Size 627B
- SHA256 ee148cc9c3411abd1f2c6aac69797443c66195184cb70bb3fa9dde90bb488964
- MD5 ab39cb60c40a30596fee4f7eaff09e60
- SHA1 578038768fd7e3e49dfd08ab5c31a8787f27c86f
- SHA512 2da961b322c01477d2cc030190926906f22ddebffd6dd0deca98fae8b857631230f68f64d109dc756b5a2d98232cc416e7fd32786f3c71f276e18084e6a7d2a0
- TLSH
  T155F0A2E06DD71379CB861131F84A39837E33AD34B8976B6775FC019DA8075008B7C429
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral13 behavioral14
- Target
  overrides/icon.png
- Size 518KB
- SHA256 87c3d66ba72e0e034c1a05f48044edc5badc25d55344dd32a2f38b82874add73
- MD5 ccc5325d4fcf8820b6273b12f133f684
- SHA1 d1c4d234a36ff2c5c7b39cb50dc4a2fa2c5ceea2
- SHA512 c5e26001532ed39ed4377ea657c5a0f8fd6b6f087db7b8562f5b468e0f63deceaeba5316f99e925b8ef79b02cd2ca569a4c6519a9838d1fa702b7b08078a3f3f
- SSDEEP 12288:P/ynDkH3qPBCzm99K2RZ2NcuUrLJ8KYej1MXiY:PX3qJCzuK2RZkcuUrFRj16
- TLSH
  T11AB4238B76385EA2F633F23BCEEA4045E6055FA1D3328B4515E9EB583267F7C1186708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  overrides/mods/ConfigLoader.jar
- Size 5KB
- SHA256 9959e61af5db2ad74aad936982047b5f40acdced191fb699bdce43c046466d0e
- MD5 11d83d7e2482d46f7d4cc732e6297178
- SHA1 a43449a7a793ce40094948528c842b3851e0a5f1
- SHA512 f2df36829625bed59629914dded91ce17e6d04bffaf568c7f5f489b420712c5c63ebaacc0d07850bad1ace79bc702d18df0c3e917b9917cb126a333d21b2b904
- SSDEEP 96:mv4N4fF8LW/JGSTzCq2GFn1ZXdc5JK9cLDlz54iGlBI1D6U6h1q/Ynnu3oCfaVj:mAM7TmqhFjXdc5J0cJz54HBI1D6E3o
- TLSH
  T1BEC18E607E69A42DD12B033E0CB7B150617C22370A47E94794A903DD2E3DB4B1B56AEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  overrides/options.txt
- Size 3KB
- SHA256 5b8ce80bd59ad779b94bc3e356205185bed3861ccd3c0db74b6e6424e28506b6
- MD5 fe85771c3437f7626c1a6d05c6364154
- SHA1 c8f31b6c321e1bd811522438f8a1aeb26d5a330a
- SHA512 f4ae42449b1bdb133fc5a7c339c6be31bbd381c0afd01b90a95c438116b3b1f1ba420061ab50d916af746677d3fb3e1bb35e4da219013952dd79ce05d27c61b4
- TLSH
  T146719A21503EFC7AD9D63E0AD550B6212E264834ACE2BCECF52D48EC374714846BEA9D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

executionransomware

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

© 2018-2026

Terms | Privacy