General

  • Target
    Minecraft-Bedrock-Free-main.zip
  • Size 1.2MB
  • Sample261027-drccraxz4q
  • SHA256 0878559a2bdf8f82c7c0e3a14675409a916a79d593846ad77a15ff66adfdf10b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://raw.githubusercontent.com/CoelhoFZ/Minecraft-Bedrock-Free/main

  • exe.dropper

    https://github.com/CoelhoFZ/Minecraft-Bedrock-Free/releases/latest/download/install.bat

Targets

    • Target
      Minecraft-Bedrock-Free-main.zip
    • Size 1.2MB
    • SHA256 0878559a2bdf8f82c7c0e3a14675409a916a79d593846ad77a15ff66adfdf10b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Minecraft-Bedrock-Free-main/SHA256SUMS.txt
    • Size 84B
    • SHA256 71a23299b23ce17fecdb64d1d23465f0276f74deb2a4ff3e1db52346e5cef842
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Minecraft-Bedrock-Free-main/TROUBLESHOOTING.md
    • Size 68KB
    • SHA256 29df162f38e0215384ab8b348c11b5a75160047b81dc741a0add266438cd68e8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/i.ps1
    • Size 40KB
    • SHA256 b14321b70cd4c6c3b7ca1d07e7643c1e47e08ae1fd07ec8c98107ab0cafe199b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/install.bat
    • Size 2KB
    • SHA256 0a09d5b8c2a27d0a3b862eae2bba4496c03dffe9b66db2fd5b15949444153668
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      Minecraft-Bedrock-Free-main/mbu-download-counter/worker.js
    • Size 3KB
    • SHA256 49e8e4047faf810769c1c75976594fbf534d8de9c1d8b76bb295d26028d0135b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/menu.ps1
    • Size 349KB
    • SHA256 3640aa8982eaa4e291176e0edb7d4737310a6cb74314ce063563f08c888a70f6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/release/winmm.dll
    • Size 1009KB
    • SHA256 bd1b4c413c657293935d0a072a5c0aa60c9c7384164e8fa36a62ae4208af067c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Minecraft-Bedrock-Free-main/source/.gitignore
    • Size 241B
    • SHA256 c7e9973412246c88e9834c613ffd0ed959f619455b0c23d7f215e64f88ed90eb
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/source/build.sh
    • Size 10KB
    • SHA256 d4f4c031d3b0ab80f4ff8e7ef65f4818241fc509861cf64dabe726795f69151d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/source/common/simple_ini.cpp
    • Size 2KB
    • SHA256 8e69847b67afbf677553b3ddd63e819bb2fe06bbdd300cabff56a108803247b2
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/source/common/simple_ini.h
    • Size 1KB
    • SHA256 52cde09b5b9e8820640ca191b37b383d55e9c44c679b2bbe0daebc086a8f0be7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/source/proxy/gen_winmm_stubs.py
    • Size 9KB
    • SHA256 e589d7eb8eb2cbbb688eaf433a3ec5c3c0ceb56c39685f9a0c03a63201696133
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/source/resource/unlock-CoelhoFZ.ini
    • Size 454B
    • SHA256 d13a4c53389c6a35616ccbe2c09912a43369d904a52b461d734f4ebec212ddfc
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      Minecraft-Bedrock-Free-main/source/resource/version.rc
    • Size 1KB
    • SHA256 75bc3c62638fa0e3b980a2e8da138520ff15c6cc75d5946e47066dd0abd48321
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Minecraft-Bedrock-Free-main/source/shim/dllmain.cpp
    • Size 9KB
    • SHA256 25ead9bdcd2f6cc01a972112786f4b8aa6dc4ae69864b8702148e07e901575bf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

discoveryexecution
Score
10/10

behavioral10

discoveryexecution
Score
10/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

discoveryexecution
Score
3/10

behavioral14

discoveryexecution
Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10