Hostile ^99% Download

dupe-2.jar

Minecraft token access alongside redirected child launchPrefire packed runtime Minecraft stealer

SHA-25696aebd4d37f98fa3a10f17d769ebf47e3b0b2aa478a84f564f0cc40eeb6bfea3

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)

Evidence

Java bytecode ProcessBuilder constructor tiApn.class · 0x0–0x260

⋯8 more rows
0x802f7574696c2f42617365363407000901/util/Base64....
0x900007456e636f6465720100216a617661..Encoder..!java
0xa02f6c616e672f50726f63657373427569/lang/ProcessBui
0xb06c64657224526564697265637407000clder$Redirect...
0xc00100186a6176612f6c616e672f50726f...java/lang/Pro
0xd0636573734275696c64657207000e0100cessBuilder.....
0xe00852656469726563740100256a617661.Redirect..%java
0xf02f6c616e672f696e766f6b652f4d6574/lang/invoke/Met
⋯3 more rows
0x1306e646c65730700130100064c6f6f6b75ndles......Looku
0x140700100063c696e69743e010003282956p...<init>...()V
0x1500c001600170a0004001801000d735842.............sXB
0x160616a5f496a6c4b6157530100124c636faj_IjlKaWS...Lco
0x1706d2f6769746875622f746941706e3b01m/github/tiApn;.
⋯15 more rows

Java bytecode ProcessBuilder start tiApn.class · 0x320–0x3f0

⋯3 more rows
0x3503b29560c001600380a00270039010005;)V....8..'.9...
0x36073746172740c003b00170a0027003c01start..;....'.<.
0x3700008646174614974656d010014617665..dataItem...ave
0x3806a5f77626b5f76756d7462795f6f7369j_wbk_vumtby_osi
⋯7 more rows

JVM Base64 encodeToString call tiApn.class · 0xc05–0xda5

⋯7 more rows
0xc75295b420c00eb00ec0a004f00ed01000e)[B.......O.....
0xc85656e636f6465546f537472696e670100encodeToString..
0xc9516285b42294c6a6176612f6c616e672f.([B)Ljava/lang/
0xca5537472696e673b0c00ef00f00a000800String;.........
0xcb5f103f5d14b9d03c6f82e2f0363ce8e79....K...../.c..y
⋯15 more rows

Java ProcessBuilder merges standard error tiApn.class · 0x1684–0x1784

⋯3 more rows
0x16b464546f0c017501640a000d017601000edTo..u.d....v...
0x16c472656469726563744f75747075740c01redirectOutput..
0x16d47801680a000f01790100137265646972x.h....y...redir
0x16e46563744572726f7253747265616d0100ectErrorStream..
0x16f41d285a294c6a6176612f6c616e672f50.(Z)Ljava/lang/P
0x1704726f636573734275696c6465723b0c01rocessBuilder;..
0x17147b017c0a000f017d0100096469726563{.|....}...direc
⋯7 more rows

JVM iterates ZIP archive entries wfuP.class · 0x3052–0x3292

⋯3 more rows
0x30823b29560c002e02780a0272027901000c;)V....x..r.y...
0x30926765744e657874456e74727901001a28getNextEntry...(
0x30a2294c6a6176612f7574696c2f7a69702f)Ljava/util/zip/
0x30b25a6970456e7472793b0c027b027c0a02ZipEntry;..{.|..
0x30c272027d0100166a6176612f7574696c2fr.}...java/util/
⋯7 more rows
0x3142612f696f2f42756666657265644f7574a/io/BufferedOut
0x315270757453747265616d07028b0100186aputStream......j
0x31626176612f696f2f46696c654f75747075ava/io/FileOutpu
0x31727453747265616d07028d010006746f46tStream......toF
0x3182696c6501001028294c6a6176612f696file...()Ljava/io
⋯4 more rows
0x31d27453747265616d3b4929560c002e0296tStream;I)V.....
0x31e20a028c0297010004726561640c029902........read....
0x31f2440a0272029a01000577726974650100D..r.....write..
0x320207285b42494929560c029c029d0a028c.([BII)V........
0x3212029e010005636c6f73650c02a0002f0a.....close..../.
0x3222028c02a10348c4b7d803852f60a603b8.....H...../`...
⋯7 more rows

No evidence locations were recorded for this file. Raw result