Resubmissions
17/10/2026, 17:24
261017-vywhmsw1gs811/10/2026, 15:21
261011-srev7swz9k611/10/2026, 13:57
261011-q9m87abt6j809/10/2026, 20:53
261009-zpnhwsev71808/10/2026, 17:19
261008-vvwn8ssy3n807/10/2026, 16:05
261007-tjy5jsbt5s803/10/2026, 13:22
261003-qmhp7azaqg303/10/2026, 13:06
261003-qcfg3sz1gx609/09/2026, 20:08
260909-ywr9zsan6t809/09/2026, 20:00
260909-yq8d1szhre8General
- Target bedrock.jar
- Size 1.0MB
- Sample261007-tjy5jsbt5s
- SHA256 445048872ba5168795c283877bc05fd9d21aa70000f2029037136be6f36a300e
- MD5 58ba08ce8b2b48c4bed3ae37539c7935
- SHA1 400b6e89b554bbb513a1cfbf002054d2a1bc02af
- SHA512 9c382581db99db0694b4f387bb7eec30fe2bbf8e61c92058e5c6cb4e644178e7451fcc21ce5426c732c78b6bd2213484439889c917167079393162970c23523b
- SSDEEP 24576:69NYxWkOV6DkO0W29lgvtd7LlaiRZKSRAxhptwFCfzY:69xtykh+/pRNRWQCfk
- TLSH T1023533E9EC868D29F0B3A674F51589CF209C61BA90E293B35C3C45D294FDAF49143E36
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
bedrock.jar
Resource
win10ltsc2021-20260911-en
22 signatures
900 seconds
Malware Config
Targets
-
- Target bedrock.jar
- Size 1.0MB
- SHA256 445048872ba5168795c283877bc05fd9d21aa70000f2029037136be6f36a300e
- MD5 58ba08ce8b2b48c4bed3ae37539c7935
- SHA1 400b6e89b554bbb513a1cfbf002054d2a1bc02af
- SHA512 9c382581db99db0694b4f387bb7eec30fe2bbf8e61c92058e5c6cb4e644178e7451fcc21ce5426c732c78b6bd2213484439889c917167079393162970c23523b
- SSDEEP 24576:69NYxWkOV6DkO0W29lgvtd7LlaiRZKSRAxhptwFCfzY:69xtykh+/pRNRWQCfk
- TLSH T1023533E9EC868D29F0B3A674F51589CF209C61BA90E293B35C3C45D294FDAF49143E36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.