0feba39dfce7f459eead76ac2fc1fcce899d7a0280cc5e93e661800f9fe9ea53

Sharing

Copy URL Twitter E-mail

General

Target
BoardRaid.zip
Size 22.3MB
Sample261001-w65a7avdkc
SHA256 0feba39dfce7f459eead76ac2fc1fcce899d7a0280cc5e93e661800f9fe9ea53
MD5 af467e772446b23107104791fa8e005b
SHA1 10655be45fc4a44e3f6b00a0fbf87fe9be8e621b
SHA512 50e55a97afca6966a409cfc3a1fff1439f85c1b18f3eb626f263046185865af3ae3b814b0a24d459448decce65573c2104a171d557698a6d3a006dc0c832bb81
SSDEEP 393216:gxbE1jCBeeemSpEtNC0SPbbkWz/pAWhOsb/BW6ImTtS1rXKunQesDAz6XMW5Vd9N:4E1ToBSPbbfz/pvXJLDT3unHsDNVd9N
TLSH
T12C37339A6ABC1641EF3FF0FBC5102B20DDD22267460ECD787B92E6A9A73D5F41060197
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  BoardRaid/.minecraft/.fabric/processedMods/com_google_code_gson_gson-2.10.1-f57d92ebff492dab.jar
- Size 282KB
- SHA256 07c7348fa264f383b693b214b7a430afe8be6ea20b728ff78541045d844bde07
- MD5 f781f930f8c55eb8982006f38111bace
- SHA1 3eec6103fb803d57ca2ab587be71061279119931
- SHA512 cf87b678612a8f6f30f6f87fbd461882b8f3bb0b47d113801a6c637fda0f207176625a88b3c541e668b0ef05de4adc48dac8e82beaf3f0289796db2de62ad9df
- SSDEEP 3072:U463ydGoBhZaCTQu8wMMaOYDUvNKif50l7zBnnS9aiArCNTctkhzyDtdrpUmcL3W:T63ydEnaYYKiB0FZviqCZhzyiF/e
- TLSH
  T15C54BFEBB9598DCEE54FF83B00818022B560E0DAC44EF91F42BA4199C9A7DD83B157DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1 behavioral2
- Target
  BoardRaid/.minecraft/.fabric/processedMods/fabric-key-binding-api-v1-1.0.0+1.16.1-edcb1a103605a244.jar
- Size 8KB
- SHA256 6ee6b709294b46351b720afa1dd69d2b78807e3d14e4f09016eb6b30b6c2227d
- MD5 011c6b91057c05d7ee2347291e68df34
- SHA1 389b48a5d7d6f0f547b92cb89151739018a9970f
- SHA512 4c4392eff45407cbea31887984494fa7c4f327c98b33e7582c8afb68c672f89d9ad10358843a99f6b60c1ee7d74a6601707ec9cdf2ed1f3ed7801a2596d3ab82
- SSDEEP 192:OrTtGBktQOzFvycsXiUHf7zJVfCSR3TMvaOO5SCTeljS4xX:oGwQO9ycsSUHf73ftRKOCl2IX
- TLSH
  T1CF0285383B4DA42FC49783710A81D1B664397F6B1B03A0CF3968505E4BEAE4B63469DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral3 behavioral4
- Target
  BoardRaid/.minecraft/.fabric/processedMods/hermes-core-0.3.2-f3206229e41051c0.jar
- Size 262KB
- SHA256 85e8ac52ebd8185cf165dc53c5a21a4fbdad37515eac6c6f3ced08d2a545f125
- MD5 2abe9eb08797433ef58847bda675a042
- SHA1 9e16741a912706fbd7378b9209be3ee66a12761b
- SHA512 069e190f2293d7919ddee4169d036bbb5928551eff2206d7ea0d6191c1bb697f2fd56688469c0f412a994ecfeab9586db9b271ba342e5c76e8c6f60cd303ffd8
- SSDEEP 6144:0lP/5cSLNemlB471mrOE9Tmt0jAAIhD4mYK188Iy4Xc:0lP2GIIB47fE9Tmt0k5Bcy4Xc
- TLSH
  T14A4423E79B3C188AE5A5A0BEC74BF50AD4A2750D0BCBD68F53820C54817B76E110ADCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral5 behavioral6
- Target
  BoardRaid/.minecraft/.fabric/processedMods/mixinextras-0.5.5-cd81fe35163f5828.jar
- Size 710KB
- SHA256 5da883dc4bfb16e4ceca3f16d8c4ad937bdfb1ce337ed5ba15472d4d81dd6242
- MD5 c67dd516464988323e27c2e631c44562
- SHA1 d1055b99c0ab08a8403fe2da3d79ca28e6340a76
- SHA512 854e8fdc79699835253cb1d98ff10c6ef88586f11a1a279a198e8c6784ff7477dceb6d8d8562fafb458b2c43648f6dc4853e42a3d606ba495d1c3eafa02d953a
- SSDEEP 12288:cVUYGJYJlcTz1JNxVrOzLoF+Ckbzm9ThDCiYIP+6X9qcDpBJSTVxuDQPOeRq:DckzDNLOzLfCkbzaYr6tqcDTJ2xukWoq
- TLSH
  T13BF4BF2217EC5675DF67C1B392627637D6290AFBFC062C02AE981EEB2C7164D0F19748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral7 behavioral8
- Target
  BoardRaid/.minecraft/.fabric/processedMods/mixinsquared-0.2.0-beta.6-dbd846333fe82b11.jar
- Size 80KB
- SHA256 62b786b37472cba6780b66c93f01e12dd029a594d89be18334048ff20c6393e6
- MD5 53e13d42d57860e716a21c06a97e3d97
- SHA1 1c369f59779c15aa0032bdb7e18adffe71750e8d
- SHA512 70c8dc00403380756a8a72bbead35ecfb8ff2a863946934060c708caf828997415a1beb27f012a74a35bb6b6ad8feb0cea421bffb4698dadefb3e4d336eaae9e
- SSDEEP 1536:R3UsCs7PgOoKN/W6+pm2D5NrvX+0FGNcbqdfvk7klYohOxyMNiQ:R3fgfKN/WzpmuNTX+0FFqdyklYocxbiQ
- TLSH
  T12B83BFBEF7ED603DDD2BE276A981A533B7784BACE253241614F808C3C469DBA471605C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral10 behavioral9
- Target
  BoardRaid/.minecraft/.fabric/processedMods/wfvaio-1.3.0-f149528243335e08.jar
- Size 185KB
- SHA256 caa111aabf67a807e544cf1eee7f827bc2f5b0cf702e4fbab263c50f57ef4f01
- MD5 6c44e1551887390fbb1b811dcca9300f
- SHA1 592a8701a23726e3d3b14cea52069f0ddb5fe7f1
- SHA512 e8c84a773d67ad87809f670931a0629a517b1121f69ded2da6e1f29d9956fbf6f1ee72ef3e7b53eeca799110c37eb27d5315384452825fd1516a9f37a9173221
- SSDEEP 3072:oVJOaBEbkETWXV2lvXdS5x4Zt51detgycl2con+pnH1op6Bovmf:oVAa1itS5eX51wtgvlhon+ZHdKvo
- TLSH
  T1C404BF08E976A92DCCA7D4360080DE72D43B47D4FC82590F2F705A95B9E790B17A2EDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral11 behavioral12
- Target
  BoardRaid/.minecraft/.fabric/remappedJars/minecraft-1.16.1-0.19.5/client-intermediary.jar
- Size 17.9MB
- SHA256 d6f0332c1641a609242673fdabf9362a4066c0b265e5a13ed6b81a4ef428d86d
- MD5 e610991450f555ca19f9adb4fe595ec2
- SHA1 c5a137ef357829d42b36738ab372266bfbf72d07
- SHA512 fa8225c21a6177300d0275a2d19c3f9ac1155b3b144ae920ab41ad32ecde9c5057571afe588e365225730e2396b1770634f70881467d181aaef0f0455a8e9160
- SSDEEP 393216:FSoko22ymp6YbjOiGay8HUPSkwW9TKo3gcik:Mro22Dh/OiG6KfD9rgcik
- TLSH
  T1BB17AE1DBAEB5670E50F863E80BF8122FC348A7D991491EF727464047FD5CC12A53ABA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral13 behavioral14
- Target
  BoardRaid/.minecraft/mods/antigone-1.16.1-2.0.0.jar
- Size 4KB
- SHA256 b2e5058596048618e864dd9645fad12789b5cf7d4d635f437f1ffc07df584cf6
- MD5 b7be392c7f29a69fd68e503c3abd322d
- SHA1 634c1a0f9f21916c2d5141fb04decffe34677a72
- SHA512 b385e7615c644c0f354b85409f95c137413483796057a0755b4f2677b8acf3eb0dda8c55d7fb4358dd5e3c44f28c63816c787336b54ac3759ca8424bfc108493
- SSDEEP 96:9tQSOxqLy6f27opiOh4GTUWNRbj4o7YScFNJN66qy99k8j/MFZ:3QPxqL/f5iOqGJ4o7YFFUOnR7MFZ
- TLSH
  T1F391B9243EC5C9DECD6FCDB1175399139362A29E554AAE07064062DCBCFAC482F439C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral15 behavioral16
- Target
  BoardRaid/.minecraft/mods/antiresourcereload-5.2.0+1.16.1.jar
- Size 13KB
- SHA256 d1410595b96164799c24a0a6a1af871ca887987994cc948cc5ddab61e1969fc5
- MD5 56b593d8eb0c5a6d63a1bdbc78463225
- SHA1 33ad13fed317ac0ddf4e9d81030bc32db6c0c774
- SHA512 68d9561b4e77563c7ccb55bcb0bea51ef56c7452169cf57d529ac339c08eaef0536793f2a08b3600dc5be3d613afa72182de55e1f915adf221a5d1eed31f7bae
- SSDEEP 192:3PmFan7WpS9YKvBO1NyHTzA+sgayqCPk9RbeuLRU4RaZDK6bTG5xgQ3pICBkx6l7:/sayo1YGGZCk9vUBZG6bTOiCBk+NAuGY
- TLSH
  T1C8523B177FC9A638E4164B37245A81D2D55082AEC91EA57F88A0427D4CF2AD73F03DB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral17 behavioral18
- Target
  BoardRaid/.minecraft/mods/boardraid-0.4.9.jar
- Size 3.1MB
- SHA256 73e05e210573847ced87ef487683e59ec6d19b0d073c1e77785bb018c1459699
- MD5 c052b77cf31d6d6bfc83f6d51e063749
- SHA1 f14e5bf34f6ac9712edd0d436c95cb1a4dacdff9
- SHA512 7aa81e4c794fceebfee9c98dec99982f9c378b0dea14bda9ae6ca439dfbdd4ce485451bbf454418b2dd9e6545f2e1ea47f6b8cb88e16bb99456ee552d78f1da7
- SSDEEP 49152:lX2QnTUpfh+1Z7zBBQ2tfg63ucjWdJeNa3mjFaHbPqDFnpRmmE9aQv6GrbF:lz+fh+1BQ2nudJeN5o7oHo15rbF
- TLSH
  T1D7E5331A7E8C953DE96789318100D183BF652E38C425AE5F0970194D6DF9D0B2B4BFEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral19 behavioral20
- Target
  BoardRaid/.minecraft/mods/chunkumulator-1.1.1+MC1.16.1.jar
- Size 96KB
- SHA256 6c61b0d9c4ac99a1610d0f25f0ee20609d09f7a47cbcca7c00878656cd0a103a
- MD5 98b41439d85ace0f2faf53f637d79c30
- SHA1 29c20f0614cfaa3bd093b56f8ea8f86fbc90900f
- SHA512 0e04c81b2b7bdc6fc664fb3a4dc99475a1563827f221928115e15b1b0164ed49cdd099bcc5943ce6b420886f3b51e639abcebd4fbddba8f3973e546312901c1f
- SSDEEP 1536:QJOLEYkCKm2CNXpjOPev8W/PhSzvAFXOob4CGygc2phIGEs42yLzASj9Nl+I:Q0wHYOPefJSzcvR26s4xLzASj9Nl+I
- TLSH
  T10FA3F1697DBD2A0CDA0FFE3F4423568224B83B254006D1FF29E17A8D2AE599393325C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral21 behavioral22
- Target
  BoardRaid/.minecraft/mods/glacier-1.0.1.jar
- Size 235KB
- SHA256 28e5d70399910410360b57df4771ec248e5b518dee047c34c91132d188358a85
- MD5 c4ffbd914471027a8fb14c078dee133f
- SHA1 5cc0325e0f7cd019b1f31033108b7a56ee31a73c
- SHA512 ee0784d1d6995b9609f2cbfdbe29836a30b562b95f10dee2b3f37b4633b9a6cbbcaa3b93d00ff6d20ab19c8f432fbc0eb78bf16ef32e7fe392a57bb788e87055
- SSDEEP 6144:umGvU/HyFQK9BCDlgeNiUKm5Elyu9ADT8P:zGNFQKmDCeku+BF
- TLSH
  T1C5347DA53BFEA0BAC913407A148149857B1657CCF601B86F739087AE69E9D9B1303FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral23 behavioral24
- Target
  BoardRaid/.minecraft/mods/hermes-0.15.1+MC1.16.1.jar
- Size 522KB
- SHA256 ce1fe788e3c8f3078945042754dc07402fff07083bd739fa11c84ffdcc777a47
- MD5 9dd2b4fe7bc05f8012926ebd9eab7e98
- SHA1 64b66e3624c88df36f94e34001f22390ee1420e6
- SHA512 2924a72bfc55b4b911a6b5920ff88e2c1a3bc2747da806b4be019eb56a3612233e83f948a43f1f6d8d2fecd57124c8a4573e051659525a312f84536b0c26a94c
- SSDEEP 12288:fCGI+BA7r49Fm90KdBAxcYyWAzEUi5kmlb7e6XYeOz+l:S+BIDyKAcVti5t57e6Ivz+l
- TLSH
  T19FB4126B7F6C606AE573A1358506A2838429330E560FD54F2AD14DAF44E7ADF034AFCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral25 behavioral26
- Target
  BoardRaid/.minecraft/mods/krypton-1.16.1-backport-0.1.3-SNAPSHOT+2021-02-20.jar
- Size 115KB
- SHA256 647a8865773408e53242afebaf5d18b8412616c1c260f1ff5ddcf1c0cbf50c87
- MD5 48d94547accdc03af16d8010685caafd
- SHA1 4081484aa589dd7e78b773107e3a6f158909a499
- SHA512 b9e6ff4daaa6fc68357535a937b5950f1e8f5a5bc4ade56df71cc95feb5ef91fee687d90b4904b49bf0af260d46e6c2f89cc78c2271fec59f4c68819ba0c6de7
- SSDEEP 3072:gk0TKHeRImYcjQxhO7qVaitr7PcgU6OHxCi:X+/0xuqVaSr7HUnxCi
- TLSH
  T176C3CF202F99EA99C88340320F22DACAFE8EDF94D1098F4673572795CC4595D5E263BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral27 behavioral28
- Target
  BoardRaid/.minecraft/mods/lazydfu-0.1.2.jar
- Size 15KB
- SHA256 e78eb1492e20bcd8c998d4142dd437c2517393c5d02f582204ad8a38341e75e8
- MD5 b2597e901c05673ef2834dad32da8824
- SHA1 2efec5781f1271bdcdae462eee402ccb97bff6fe
- SHA512 20b1cd3e62051c7d7498ecdc49912acb918fc4748d469c67c078cc97197289760e64b9339a4d4a03d175f648c8be8601d131776a9a6bdb8832cecdda6fc46498
- SSDEEP 384:1orW1nAR9momphuoeQp6MP+d1GgcQoeqGEqZhp:1ormAR9N0uod8MPksgNq+hp
- TLSH
  T11F62CF293E14EE3DD32BD03295632E43EF1176C854ACDE09788327518C62CD5E045BBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral29 behavioral30
- Target
  BoardRaid/.minecraft/mods/lazystronghold-1.1.4+1.16.1.jar
- Size 12KB
- SHA256 c2c48b197a95060f53f4d0841409e36b7a5f008b91dad03f5e3bcc408747790b
- MD5 864843da582e804cf7b12e22ab584528
- SHA1 2c6ee8e5a76981bd068ae6eb2f66804777304290
- SHA512 c739ff2d4695591417e990479fdb5f2de2b502870d8c63ac9866decf9e88e75df1e6c4d2a00edeaf7e5b4780c9d42c6d13a7a43b1227a610a7ac6db121764e4d
- SSDEEP 192:PrVe9Kf2A32JMclv9iyQnwLpwFNKKF7JgLoE+XKXflFHW3nEfdomU3D/qoEjAeDq:I9c2A3Uiy7UF79KH2XxF3DgpfWt
- TLSH
  T14D427C981FD0E26CDE03C87100A8D753C4691728363A62EF035429EE99E5EF78B62DCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

Drops desktop.ini file(s)

Network Service Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32