krypton-1.21.11.jar
Minecraft credential stealer with C2
Minecraft token access alongside redirected child launchPrefire packed runtime Minecraft stealer
SHA-2561e8668a783aa82c45f2a70599f9576dec1b774a1d0ce0127a97f1af08b0cdb83
Evidence
⋯8 more rows
0x806176612f7574696c2f42617365363407ava/util/Base64.
0x900009010007456e636f6465720100216a.....Encoder..!j
0xa06176612f6c616e672f50726f63657373ava/lang/Process
0xb04275696c646572245265646972656374Builder$Redirect
0xc007000c0100186a6176612f6c616e672f......java/lang/
0xd050726f636573734275696c6465720700ProcessBuilder..
0xe00e01000852656469726563740100256a....Redirect..%j
0xf06176612f6c616e672f696e766f6b652fava/lang/invoke/
⋯3 more rows
0x1306448616e646c65730700130100064c6fdHandles......Lo
0x1406f6b75700100063c696e69743e010003okup...<init>...
0x1502829560c001600170a0004001801000c()V.............
0x1606976744a5f616f593839635a0100154civtJ_aoY89cZ...L
0x170636f6d2f6769746875622f6576637563com/github/evcuc
⋯15 more rows
⋯3 more rows
0x3553b29560c001600360a00250037010005;)V....6..%.7...
0x36573746172740c003900170a0025003a01start..9....%.:.
0x37500136c59466e5f71426d595f52545472..lYFn_qBmY_RTTr
0x3855f77614b7201000b736c667072447269_waKr...slfprDri
⋯7 more rows
⋯5 more rows
0x78b28294a0c009600970a00950098010017()J.............
0x79b6e65742f6d696e6563726166742f636cnet/minecraft/cl
0x7ab6173735f33313007009a01000b6d6574ass_310......met
0x7bb686f645f3135353101001b28294c6e65hod_1551...()Lne
⋯4 more rows
0x80b742f636c6173735f3332303b0c00a000t/class_320;....
0x81ba10a009b00a20100176e65742f6d696e.........net/min
0x82b6563726166742f636c6173735f333230ecraft/class_320
0x83b0700a401000b6d6574686f645f313637......method_167
0x84b340c00a600610a00a500a701000b6d654....a........me
0x85b74686f645f313637360c00a900610a00thod_1676....a..
0x86ba500aa01000c6d6574686f645f343437......method_447
0x87b313701001228294c6a6176612f75746917...()Ljava/uti
0x88b6c2f555549443b0c00ac00ad0a00a500l/UUID;.........
0x89bae01000e6a6176612f7574696c2f5555....java/util/UU
⋯11 more rows
⋯7 more rows
0xc57295b420c00ea00eb0a004300ec01000e)[B.......C.....
0xc67656e636f6465546f537472696e670100encodeToString..
0xc7716285b42294c6a6176612f6c616e672f.([B)Ljava/lang/
0xc87537472696e673b0c00ee00ef0a000800String;.........
0xc97f001002108ed929be4aeaeeebd99dbb2...!............
⋯15 more rows
⋯5 more rows
0x26d876612f6c616e672f436c617373010007va/lang/Class...
0x26e8666f724e616d65010025284c6a617661forName..%(Ljava
0x26f82f6c616e672f537472696e673b294c6a/lang/String;)Lj
0x27086176612f6c616e672f436c6173733b08ava/lang/Class;.
0x271802dc01000c6d6574686f645f34333437.....method_4347
0x2728300a02d602de0c02df02e001000967650.............ge
0x2738744d6574686f64010040284c6a617661tMethod..@(Ljava
0x27482f6c616e672f537472696e673b5b4c6a/lang/String;[Lj
0x27586176612f6c616e672f436c6173733b29ava/lang/Class;)
0x27684c6a6176612f6c616e672f7265666c65Ljava/lang/refle
0x277863742f4d6574686f643b0702e2010010ct/Method;......
0x27886a6176612f6c616e672f4f626a656374java/lang/Object
0x27980a02e402e50702e60c02e702e8010018................
0x27a86a6176612f6c616e672f7265666c6563java/lang/reflec
0x27b8742f4d6574686f64010006696e766f6bt/Method...invok
0x27c865010039284c6a6176612f6c616e672fe..9(Ljava/lang/
0x27d84f626a6563743b5b4c6a6176612f6c61Object;[Ljava/la
0x27e86e672f4f626a6563743b294c6a617661ng/Object;)Ljava
⋯9 more rows
0x28880c02f502f601000a6765744d6574686f........getMetho
0x2898647301001d28295b4c6a6176612f6c61ds...()[Ljava/la
0x28a86e672f7265666c6563742f4d6574686fng/reflect/Metho
0x28b8643b0802f801000b6d6574686f645f31d;......method_1
0x28c83831320a02e402fa0c02fb0151010007812.........Q...
⋯7 more rows
Showing the top 5 files — 7 more files (76 regions) not shown.
No evidence locations were recorded for this file. Raw result