Overview
overview
9Static
static
3Minecr7aft...1).rar
windows10-2004-x64
7Minecr7aft...1).rar
windows11-ltsc_2024-x64
1Minecraft ...on.iso
windows10-2004-x64
3Minecraft ...on.iso
windows11-ltsc_2024-x64
3MinecraftB-2.ico
windows10-2004-x64
3MinecraftB-2.ico
windows11-ltsc_2024-x64
3autorun.inf
windows10-2004-x64
1autorun.inf
windows11-ltsc_2024-x64
1elamigos-1.bin
windows10-2004-x64
3elamigos-1.bin
windows11-ltsc_2024-x64
3setup-0.bin
windows10-2004-x64
3setup-0.bin
windows11-ltsc_2024-x64
3setup-1.bin
windows10-2004-x64
3setup-1.bin
windows11-ltsc_2024-x64
3setup.exe
windows10-2004-x64
9setup.exe
windows11-ltsc_2024-x64
7Analysis
- user interaction
yes - max time kernel
150s - max time network
179s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/10/2026, 05:10
Static task
static1
Behavioral task
behavioral1
Sample
Minecr7aftBe0drockE-1.21.130-elamigos (1).rar
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Minecr7aftBe0drockE-1.21.130-elamigos (1).rar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Minecraft Bedrock Edition v1.21.130/Minecraft Bedrock Edition.iso
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Minecraft Bedrock Edition v1.21.130/Minecraft Bedrock Edition.iso
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
MinecraftB-2.ico
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
MinecraftB-2.ico
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
autorun.inf
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
autorun.inf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
elamigos-1.bin
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
elamigos-1.bin
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
setup-0.bin
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
setup-0.bin
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
setup-1.bin
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
setup-1.bin
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
setup.exe
Resource
win11ltsc2024-20260911-en
General
- Target Minecr7aftBe0drockE-1.21.130-elamigos (1).rar
- Size 719.8MB
- Sample261017-ftvcfsxtew
- SHA256 dd40bf5460b2c1dd742d22700241da3ccb390e0a76f683b7f53dc630a46f62d4
- MD5 5b1686bfa42b7a5b346f4f055108d2b9
- SHA1 78991002884a9348d41d3b9d6a4a3ea9187ef457
- SHA512 ca0fa5d2784002b09b4d314175dc06bc0ab4510e9d7b1e7e3f1bd10ef4e3eab9baff7279bdde0d21552c0dbb2a50ef56caa9bd71ff34345702217e1bec84e850
- SSDEEP 12582912:hAqNVFczuzyIGfpSzMFBzcx60/uqcGqBP49z9O5vym3+OQ8uvb:h4zuaflTcjvcGqcz05vMRvb
- TLSH T1C8793314AB4A1D33D2331FF8DAA1B1C83C79BC40AE62511BDAA59ADD0E755C8BD347C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3360 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3360 7zFM.exe Token: 35 3360 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3360 7zFM.exe
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Minecr7aftBe0drockE-1.21.130-elamigos (1).rar"1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3360