Hostile ^92% Download

doomsday-1.21-1.21.11.jar

Steals Minecraft session tokens

Minecraft token access alongside redirected child launchPrefire packed runtime Minecraft stealer

SHA-256b2fe4f804a244b2f4847d383acbece0aef597af7cc3865e0fac7a96fb50521b4

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK₂(McGa)O₆(CaEuAlAs₃ErI)H₆(Cm₅Db₅F₃Os₂Po₅Ti)Md₂(Pa)

Evidence

Java bytecode ProcessBuilder reference ieZ.class · 0x0–0x260

⋯8 more rows
0x8074696c2f426173653634070009010007til/Base64......
0x90456e636f6465720100216a6176612f6cEncoder..!java/l
0xa0616e672f50726f636573734275696c64ang/ProcessBuild
0xb0657224526564697265637407000c0100er$Redirect.....
0xc0186a6176612f6c616e672f50726f6365.java/lang/Proce
0xd073734275696c64657207000e01000852ssBuilder......R
0xe0656469726563740100256a6176612f6cedirect..%java/l
0xf0616e672f696e766f6b652f4d6574686fang/invoke/Metho
⋯3 more rows
0x1306c65730700130100064c6f6f6b757001les......Lookup.
0x14000063c696e69743e0100032829560c00..<init>...()V..
0x1501600170a0004001801000a534e53705f...........SNSp_
0x16059556665550100104c636f6d2f676974YUfeU...Lcom/git
0x1706875622f69655a3b01000c6f6e496e69hub/ieZ;...onIni
⋯15 more rows

JVM ProcessBuilder.start method reference ieZ.class · 0x2df–0x4ff

⋯7 more rows
0x34f3b29560c001600390a0028003a010005;)V....9..(.:...
0x35f73746172740c003c00170a0028003d01start..<....(.=.
0x36f00056e6f64653401000365676b010026..node4...egk..&
0x37f284c6a6176612f6c616e672f53747269(Ljava/lang/Stri
⋯24 more rows

JVM references Minecraft access-token getter ieZ.class · 0x730–0x970

⋯8 more rows
0x7b0000328294a0c009d009e0a0067009f01..()J.......g...
0x7c000176e65742f6d696e6563726166742f..net/minecraft/
0x7d0636c6173735f3331300700a101000b6dclass_310......m
0x7e06574686f645f3135353101001b28294cethod_1551...()L
⋯4 more rows
0x8306166742f636c6173735f3332303b0c00aft/class_320;..
0x840a700a80a00a200a90100176e65742f6d...........net/m
0x850696e6563726166742f636c6173735f33inecraft/class_3
0x86032300700ab01000b6d6574686f645f3120......method_1
0x8703637340c00ad00830a00ac00ae01000b674.............
0x8806d6574686f645f313637360c00b00083method_1676.....
0x8900a00ac00b101000c6d6574686f645f34........method_4
0x8a03437313701001228294c6a6176612f754717...()Ljava/u
0x8b074696c2f555549443b0c00b300b40a00til/UUID;.......
0x8c0ac00b501000e6a6176612f7574696c2f......java/util/
⋯11 more rows

JVM Base64 encodeToString call ieZ.class · 0xc05–0xda5

⋯7 more rows
0xc75295b420c00f100f20a004d00f301000e)[B.......M.....
0xc85656e636f6465546f537472696e670100encodeToString..
0xc9516285b42294c6a6176612f6c616e672f.([B)Ljava/lang/
0xca5537472696e673b0c00f500f60a000800String;.........
0xcb5f701002809ebaf89e19aaae98590efa6...(............
⋯15 more rows

JVM iterates ZIP archive entries ucokcifwValue.class · 0x2f9a–0x31ca

⋯3 more rows
0x2fca3b29560c002e02500a024a025101000c;)V....P..J.Q...
0x2fda6765744e657874456e74727901001a28getNextEntry...(
0x2fea294c6a6176612f7574696c2f7a69702f)Ljava/util/zip/
0x2ffa5a6970456e7472793b0c025302540a02ZipEntry;..S.T..
0x300a4a02550100166a6176612f7574696c2fJ.U...java/util/
⋯7 more rows
0x308a612f696f2f42756666657265644f7574a/io/BufferedOut
0x309a70757453747265616d0702630100186aputStream..c...j
0x30aa6176612f696f2f46696c654f75747075ava/io/FileOutpu
0x30ba7453747265616d070265010006746f46tStream..e...toF
0x30ca696c6501001028294c6a6176612f696file...()Ljava/io
⋯4 more rows
0x311a7453747265616d3b4929560c002e026etStream;I)V....n
0x312a0a0264026f010004726561640c027102..d.o...read..q.
0x313a190a024a027201000577726974650100...J.r...write..
0x314a07285b42494929560c027402750a0264.([BII)V..t.u..d
0x315a0276010005636c6f73650c0278002f0a.v...close..x./.
⋯7 more rows

No evidence locations were recorded for this file. Raw result