Hostile ^92% Download

konkrete-1.9.9.jar

Minecraft credential theft and C2

Minecraft token access alongside redirected child launchPrefire packed runtime Minecraft stealer

SHA-25655e07dc4271f3ba8faba60e1134c6eae9e70f93bc38498379130169f70228b0c

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)

Evidence

Java bytecode ProcessBuilder constructor cckvskxValue.class · 0x0–0x260

⋯9 more rows
0x90653634070009010007456e636f646572e64......Encoder
0xa00100216a6176612f6c616e672f50726f..!java/lang/Pro
0xb0636573734275696c6465722452656469cessBuilder$Redi
0xc07265637407000c0100186a6176612f6crect......java/l
0xd0616e672f50726f636573734275696c64ang/ProcessBuild
0xe0657207000e0100085265646972656374er......Redirect
0xf00100256a6176612f6c616e672f696e76..%java/lang/inv
⋯3 more rows
0x1306574686f6448616e646c657307001301ethodHandles....
0x14000064c6f6f6b75700100063c696e6974..Lookup...<init
0x1503e0100032829560c001600170a000400>...()V.........
0x1601801000c6f5654764f4e4a5f46436b68....oVTvONJ_FCkh
0x1700100194c636f6d2f6769746875622f63...Lcom/github/c
⋯15 more rows

Java bytecode ProcessBuilder start cckvskxValue.class · 0x348–0x418

⋯3 more rows
0x3783b29560c0016003d0a002c003e010005;)V....=..,.>...
0x38873746172740c004000170a002c004101start..@....,.A.
0x398000e6741575f4f4e4c6433705f384c58..gAW_ONLd3p_8LX
0x3a80100066b4478425841010026284c6a61...kDxBXA..&(Lja
⋯7 more rows

JVM Base64 encodeToString call cckvskxValue.class · 0xc07–0xda7

⋯7 more rows
0xc77295b420c00f500f60a005400f701000e)[B.......T.....
0xc87656e636f6465546f537472696e670100encodeToString..
0xc9716285b42294c6a6176612f6c616e672f.([B)Ljava/lang/
0xca7537472696e673b0c00f900fa0a000800String;.........
0xcb7fb01002b0aec86b3e6ae95e48183ecb7...+............
⋯15 more rows

Java ProcessBuilder merges standard error cckvskxValue.class · 0x171d–0x181d

⋯3 more rows
0x174d64546f0c0180016f0a000d018101000edTo....o........
0x175d72656469726563744f75747075740c01redirectOutput..
0x176d8301730a000f01840100137265646972..s........redir
0x177d6563744572726f7253747265616d0100ectErrorStream..
0x178d1d285a294c6a6176612f6c616e672f50.(Z)Ljava/lang/P
0x179d726f636573734275696c6465723b0c01rocessBuilder;..
0x17ad8601870a000f01880100096469726563...........direc
⋯7 more rows

JVM iterates ZIP archive entries LY_Yqlvk3ZXTb.class · 0x2f43–0x3183

⋯3 more rows
0x2f733b29560c002e02440a023e024501000c;)V....D..>.E...
0x2f836765744e657874456e74727901001a28getNextEntry...(
0x2f93294c6a6176612f7574696c2f7a69702f)Ljava/util/zip/
0x2fa35a6970456e7472793b0c024702480a02ZipEntry;..G.H..
0x2fb33e02490100166a6176612f7574696c2f>.I...java/util/
⋯7 more rows
0x3033612f696f2f42756666657265644f7574a/io/BufferedOut
0x304370757453747265616d0702570100186aputStream..W...j
0x30536176612f696f2f46696c654f75747075ava/io/FileOutpu
0x30637453747265616d070259010006746f46tStream..Y...toF
0x3073696c6501001028294c6a6176612f696file...()Ljava/io
⋯4 more rows
0x30c37453747265616d3b4929560c002e0262tStream;I)V....b
0x30d30a02580263010004726561640c026502..X.c...read..e.
0x30e3160a023e026601000577726974650100...>.f...write..
0x30f307285b42494929560c026802690a0258.([BII)V..h.i..X
0x3103026a010005636c6f73650c026c002f0a.j...close..l./.
0x31130258026d01000d616464537570707265.X.m...addSuppre
⋯7 more rows

Showing the top 5 files — 1 more file (17 regions) not shown.

No evidence locations were recorded for this file. Raw result