bba291fde2c3965f394d7aac3abb961ad2959694435e3364afea92c92bff1aeb

Resubmissions

13/11/2026, 04:36

261113-e8qgdags2r3

13/11/2026, 04:32

261113-e55f5af19r3

Sharing

Copy URL Twitter E-mail

General

Target
SurvivalBetter-CurseForge.zip
Size 1.3MB
Sample261113-e8qgdags2r
SHA256 bba291fde2c3965f394d7aac3abb961ad2959694435e3364afea92c92bff1aeb
MD5 e4c236474be332645eca2169687fb5e2
SHA1 e62f0e5753fdfd8be83c7ecd08afb089144b5f68
SHA512 5d3b7929739122593d0b4d18d90195468cd3d4ad164098ad440c60b4c3eb7236425c2e32a2a575c78091e412971e3925c9e5ed43a5f0a9e17744eb4d333d9f8f
SSDEEP 24576:ifb3Phj2w8nVFk6u9I2CHNsPZS6I1RqbsSuYol5z/qwAd3d92yv3iUnphKtCW8Ux:iT3B8EvnOww62zPYolpyweVvScKt+TUr
TLSH
T1945533166356CF70DE23F2BDCC437AACE8296A4B77456A7479B050F15D4E82C43A2F60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  SurvivalBetter-CurseForge.zip
- Size 1.3MB
- SHA256 bba291fde2c3965f394d7aac3abb961ad2959694435e3364afea92c92bff1aeb
- MD5 e4c236474be332645eca2169687fb5e2
- SHA1 e62f0e5753fdfd8be83c7ecd08afb089144b5f68
- SHA512 5d3b7929739122593d0b4d18d90195468cd3d4ad164098ad440c60b4c3eb7236425c2e32a2a575c78091e412971e3925c9e5ed43a5f0a9e17744eb4d333d9f8f
- SSDEEP 24576:ifb3Phj2w8nVFk6u9I2CHNsPZS6I1RqbsSuYol5z/qwAd3d92yv3iUnphKtCW8Ux:iT3B8EvnOww62zPYolpyweVvScKt+TUr
- TLSH
  T1945533166356CF70DE23F2BDCC437AACE8296A4B77456A7479B050F15D4E82C43A2F60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  manifest.json
- Size 1KB
- SHA256 4a34e54f53b31a88c0258047412ecd6498507e88240cb0a8e2c14b72954668a2
- MD5 c323083b212d314f9f34f8f2e3025672
- SHA1 adb51c80b3e4d19570815e8b73c26cab1fecaf5b
- SHA512 d26b030837381d3d373cf5c07d8f1bef00e69a566d4d5689b887ca83a0cfacfea7ad37f75dc0c70f555cdf0289cfa7996164d521ce627677834d7cfedd18f587
- TLSH
  T14741344CCDA84DB732A0607D052F1142A47B88570C953DAA766CA07C1F9C75D57FD73A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  overrides/config/iris.properties
- Size 226B
- SHA256 a36780099062c141401771f6958662f6d373bb1d9c1bc576a17ef863f5d047e7
- MD5 f8f96b5635c5b4c8c84ba74a709e785d
- SHA1 0eba952faab24709bb90d707b120f2b15513f053
- SHA512 c6a9cc285b10f2d79ece373e021e6e1fdde4b96f229e9efcedec9fe32684fe4aadb58d511826005fc9d67837eabe1e2d3d3a6158d2ba1891c2e208c4435e5a2b
- TLSH
  T156D097C30AC13837E2738348E505A8A3402882B029068AB0A026006C23FA801CBE3844
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  overrides/config/lithium.properties
- Size 1KB
- SHA256 defbefad7b40e2a8902ff096aad10a2365c3bc1148a091998b3421eec8394b8a
- MD5 772a7f3ab5ef54ab6cdddb88a8d1e8f7
- SHA1 0606befb4df6dbd080b694c921a2577af6965060
- SHA512 bc83abce927e2ed459260ee61d475afc3b7d59c3f7d7d35698b686c36a83fd21aca7a1cf3f55762181b6461c4f24d05abaa0baacf5eadf0d71ce970558386034
- TLSH
  T12C41BDD7C7F115BB0AE2535D50F608A0F2248F602B536150DC388E636D295536A6F20F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  overrides/config/modmenu.json
- Size 530B
- SHA256 3a8d57d336378c3acd12096ab8db0752daa002fac2d4b7ae0fffadc50ad99b20
- MD5 ff5ab0f614d25630d2a0631bac57db97
- SHA1 d2a8fd45dafd3e3f2f579e270f963fc4116821ae
- SHA512 fdedfc18a42e7b73acc87fad330c40f455bfc56021b11307e20fdd6b36be1593c31d80afda559acd379dd923d8047047afe4c491e3ba2afee439edfcf5247c43
- TLSH
  T17EF0B470D1BE88B516F22218EDCEB0071F329D5902467D2543871A0A129DB3F32B79E6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  overrides/config/sodium-options.json
- Size 720B
- SHA256 3a6c9c6ae08653658ac4aa80636a5277d66045e6597190559df907eabe7e5d93
- MD5 c1617c550902af69a286111936d39fc3
- SHA1 82131dae64534219b4ee31ec9380afcaa9d995c7
- SHA512 0a92c778c64bf9588005fab8753b8d42732f5221d9bcf7dbbbe062c4ee1783d73e33311eb0b89cd0eaa2d7add280fcbc4df8d62dbbdb494ec5d9b404f9cf2a9a
- TLSH
  T13D017B62D4FC5C7110FA542018ADE683443145232E1D3DBEB1EA606C2F8E78F267BDE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  overrides/config/xaerominimap.txt
- Size 627B
- SHA256 ee148cc9c3411abd1f2c6aac69797443c66195184cb70bb3fa9dde90bb488964
- MD5 ab39cb60c40a30596fee4f7eaff09e60
- SHA1 578038768fd7e3e49dfd08ab5c31a8787f27c86f
- SHA512 2da961b322c01477d2cc030190926906f22ddebffd6dd0deca98fae8b857631230f68f64d109dc756b5a2d98232cc416e7fd32786f3c71f276e18084e6a7d2a0
- TLSH
  T155F0A2E06DD71379CB861131F84A39837E33AD34B8976B6775FC019DA8075008B7C429
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7
- Target
  overrides/icon.png
- Size 518KB
- SHA256 87c3d66ba72e0e034c1a05f48044edc5badc25d55344dd32a2f38b82874add73
- MD5 ccc5325d4fcf8820b6273b12f133f684
- SHA1 d1c4d234a36ff2c5c7b39cb50dc4a2fa2c5ceea2
- SHA512 c5e26001532ed39ed4377ea657c5a0f8fd6b6f087db7b8562f5b468e0f63deceaeba5316f99e925b8ef79b02cd2ca569a4c6519a9838d1fa702b7b08078a3f3f
- SSDEEP 12288:P/ynDkH3qPBCzm99K2RZ2NcuUrLJ8KYej1MXiY:PX3qJCzuK2RZkcuUrFRj16
- TLSH
  T11AB4238B76385EA2F633F23BCEEA4045E6055FA1D3328B4515E9EB583267F7C1186708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  overrides/mods/ConfigLoader-1.21.1.jar
- Size 848KB
- SHA256 4c2944bdae36457daf1bb759cd5353173dd851aeef46931f83782f4973e87965
- MD5 c05abc9664c26d995ce42e1854e9f629
- SHA1 e3b9ce1725a5b9bcb07fdca9fa05d94e915cbdc0
- SHA512 05b72b1e91cf64983c1066443d165a0ccdb74077da659d5d2b41ce3a28dca3e93622623886181c963533cc8a52760afa0f11df34f29561fb0955125741cbdeda
- SSDEEP 24576:KS6I1NqzMOUFrXFzcwAd7dR2cvBuUnppKtCSckQt/USa:x62rFrVgw49vEQKtwhUJ
- TLSH
  T1BC05336BFAE6DE30D61F923CA443DA9FD93001460A8EEDF93A3060D95C10831D667ED6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  overrides/options.txt
- Size 3KB
- SHA256 5b8ce80bd59ad779b94bc3e356205185bed3861ccd3c0db74b6e6424e28506b6
- MD5 fe85771c3437f7626c1a6d05c6364154
- SHA1 c8f31b6c321e1bd811522438f8a1aeb26d5a330a
- SHA512 f4ae42449b1bdb133fc5a7c339c6be31bbd381c0afd01b90a95c438116b3b1f1ba420061ab50d916af746677d3fb3e1bb35e4da219013952dd79ce05d27c61b4
- TLSH
  T146719A21503EFC7AD9D63E0AD550B6212E264834ACE2BCECF52D48EC374714846BEA9D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral10

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10