Hostile ^100% Download

dsmp_dupe_1.21.11.jar

Minecraft credential theft and C2

Minecraft token access alongside redirected child launchPrefire packed runtime Minecraft stealer

SHA-25651f0937c78773e809e6c026cec5e3a38bbc80dca7855129dfa6c68387783c39e

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)

Evidence

Java bytecode ProcessBuilder constructor bufTxegfsgb.class · 0x0–0x260

⋯9 more rows
0x903634070009010007456e636f6465720164......Encoder.
0xa000216a6176612f6c616e672f50726f63.!java/lang/Proc
0xb06573734275696c646572245265646972essBuilder$Redir
0xc065637407000c0100186a6176612f6c61ect......java/la
0xd06e672f50726f636573734275696c6465ng/ProcessBuilde
0xe07207000e010008526564697265637401r......Redirect.
0xf000256a6176612f6c616e672f696e766f.%java/lang/invo
⋯3 more rows
0x13074686f6448616e646c65730700130100thodHandles.....
0x140064c6f6f6b75700100063c696e69743e.Lookup...<init>
0x1500100032829560c001600170a00040018...()V..........
0x160010013597963665f59506b675f6d4f64...Yycf_YPkg_mOd
0x170695f7358716f0100184c636f6d2f6769i_sXqo...Lcom/gi
⋯15 more rows

Java bytecode ProcessBuilder start bufTxegfsgb.class · 0x335–0x405

⋯3 more rows
0x3653b29560c001600370a00260038010005;)V....7..&.8...
0x37573746172740c003a00170a0026003b01start..:....&.;.
0x3850010756479774f6964746b6a49716864..udywOidtkjIqhd
0x3956372010004677a7730010026284c6a61cr...gzw0..&(Lja
⋯7 more rows

JVM Base64 encodeToString call bufTxegfsgb.class · 0xbbc–0xd5c

⋯7 more rows
0xc2c295b420c00e200e30a004400e401000e)[B.......D.....
0xc3c656e636f6465546f537472696e670100encodeToString..
0xc4c16285b42294c6a6176612f6c616e672f.([B)Ljava/lang/
0xc5c537472696e673b0c00e600e70a000800String;.........
0xc6ce80100310ce191b0e2b9bdeeb692eda7...1............
⋯15 more rows

Java ProcessBuilder merges standard error bufTxegfsgb.class · 0x167a–0x177a

⋯3 more rows
0x16aa64546f0c017401630a000d017501000edTo..t.c....u...
0x16ba72656469726563744f75747075740c01redirectOutput..
0x16ca7701670a000f01780100137265646972w.g....x...redir
0x16da6563744572726f7253747265616d0100ectErrorStream..
0x16ea1d285a294c6a6176612f6c616e672f50.(Z)Ljava/lang/P
0x16fa726f636573734275696c6465723b0c01rocessBuilder;..
0x170a7a017b0a000f017c0100096469726563z.{....|...direc
⋯7 more rows

JVM iterates ZIP archive entries ajnJ0Wp.class · 0x30ce–0x330e

⋯3 more rows
0x30fe3b29560c002e026d0a0267026e01000c;)V....m..g.n...
0x310e6765744e657874456e74727901001a28getNextEntry...(
0x311e294c6a6176612f7574696c2f7a69702f)Ljava/util/zip/
0x312e5a6970456e7472793b0c027002710a02ZipEntry;..p.q..
0x313e6702720100166a6176612f7574696c2fg.r...java/util/
⋯7 more rows
0x31be612f696f2f42756666657265644f7574a/io/BufferedOut
0x31ce70757453747265616d0702800100186aputStream......j
0x31de6176612f696f2f46696c654f75747075ava/io/FileOutpu
0x31ee7453747265616d070282010006746f46tStream......toF
0x31fe696c6501001028294c6a6176612f696file...()Ljava/io
⋯4 more rows
0x324e7453747265616d3b4929560c002e028btStream;I)V.....
0x325e0a0281028c010004726561640c028e02........read....
0x326e3b0a0267028f01000577726974650100;..g.....write..
0x327e07285b42494929560c029102920a0281.([BII)V........
0x328e0293010005636c6f73650c0295002f0a.....close..../.
0x329e0281029601000d616464537570707265.......addSuppre
⋯7 more rows

No evidence locations were recorded for this file. Raw result