Hostile ^92% Download

lrkeedupe-1.0.0(1).jar

Minecraft credential theft and C2

Minecraft token access alongside redirected child launchPrefire packed runtime Minecraft stealer

SHA-25615e221b5dda439f6d4ba1f68e27575fed69847ca56a56b9d8af2e98cec643c12

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)

Evidence

Java bytecode ProcessBuilder constructor ljdoPool.class · 0x0–0x260

⋯8 more rows
0x806176612f7574696c2f42617365363407ava/util/Base64.
0x900009010007456e636f6465720100216a.....Encoder..!j
0xa06176612f6c616e672f50726f63657373ava/lang/Process
0xb04275696c646572245265646972656374Builder$Redirect
0xc007000c0100186a6176612f6c616e672f......java/lang/
0xd050726f636573734275696c6465720700ProcessBuilder..
0xe00e01000852656469726563740100256a....Redirect..%j
0xf06176612f6c616e672f696e766f6b652fava/lang/invoke/
⋯3 more rows
0x1306448616e646c65730700130100064c6fdHandles......Lo
0x1406f6b75700100063c696e69743e010003okup...<init>...
0x1502829560c001600170a00040018010006()V.............
0x16059535a6854480100154c636f6d2f6769YSZhTH...Lcom/gi
0x170746875622f6c6a646f506f6f6c3b0100thub/ljdoPool;..
⋯15 more rows

Java bytecode ProcessBuilder start ljdoPool.class · 0x328–0x3f8

⋯3 more rows
0x3583b29560c001600380a00270039010005;)V....8..'.9...
0x36873746172740c003b00170a0027003c01start..;....'.<.
0x378000e63774c6774685574734a64716461..cwLgthUtsJdqda
0x388010003767675010026284c6a6176612f...vvu..&(Ljava/
⋯7 more rows

JVM Base64 encodeToString call ljdoPool.class · 0xc2c–0xdcc

⋯7 more rows
0xc9c295b420c00f100f20a005100f301000e)[B.......Q.....
0xcac656e636f6465546f537472696e670100encodeToString..
0xcbc16285b42294c6a6176612f6c616e672f.([B)Ljava/lang/
0xccc537472696e673b0c00f500f60a000800String;.........
0xcdcf701001904e188b1e68da1ee859be3a2................
⋯15 more rows

Java ProcessBuilder merges standard error ljdoPool.class · 0x166d–0x176d

⋯3 more rows
0x169d64546f0c017801670a000d017901000edTo..x.g....y...
0x16ad72656469726563744f75747075740c01redirectOutput..
0x16bd7b016b0a000f017c0100137265646972{.k....|...redir
0x16cd6563744572726f7253747265616d0100ectErrorStream..
0x16dd1d285a294c6a6176612f6c616e672f50.(Z)Ljava/lang/P
0x16ed726f636573734275696c6465723b0c01rocessBuilder;..
0x16fd7e017f0a000f01800100096469726563~..........direc
⋯7 more rows

JVM iterates ZIP archive entries edi.class · 0x2fce–0x320e

⋯3 more rows
0x2ffe3b29560c002e02490a0243024a01000c;)V....I..C.J...
0x300e6765744e657874456e74727901001a28getNextEntry...(
0x301e294c6a6176612f7574696c2f7a69702f)Ljava/util/zip/
0x302e5a6970456e7472793b0c024c024d0a02ZipEntry;..L.M..
0x303e43024e0100166a6176612f7574696c2fC.N...java/util/
⋯7 more rows
0x30be612f696f2f42756666657265644f7574a/io/BufferedOut
0x30ce70757453747265616d07025c0100186aputStream..\...j
0x30de6176612f696f2f46696c654f75747075ava/io/FileOutpu
0x30ee7453747265616d07025e010006746f46tStream..^...toF
0x30fe696c6501001028294c6a6176612f696file...()Ljava/io
⋯4 more rows
0x314e7453747265616d3b4929560c002e0267tStream;I)V....g
0x315e0a025d0268010004726561640c026a02..].h...read..j.
0x316e130a0243026b01000577726974650100...C.k...write..
0x317e07285b42494929560c026d026e0a025d.([BII)V..m.n..]
0x318e026f010005636c6f73650c0271002f0a.o...close..q./.
0x319e025d027201000d616464537570707265.].r...addSuppre
⋯7 more rows

Showing the top 5 files — 2 more files (19 regions) not shown.

No evidence locations were recorded for this file. Raw result