e0b5feedf8e8c0beee4be1bb8890e485be798d056e46b558f0d9a1e0e12e0cd2

Sharing

Copy URL Twitter E-mail

General

Target
welovelarping.rar
Size 26.9MB
Sample260723-astfwayald
SHA256 e0b5feedf8e8c0beee4be1bb8890e485be798d056e46b558f0d9a1e0e12e0cd2
MD5 7f025e53d5953aa71c56740968991b91
SHA1 af6ae609100603609620d2c159bf57f0e948efec
SHA512 1ae02043c66731c6242a4f721c984c7209fcfebac4a59b4b6d94f72595343c25081442f23b079b19d9d56fbb53064473938dd5fd8255145b03503ba7aa484823
SSDEEP 393216:C+VmLQo1ULZoUHUkbSOrjx25BH6oKuqitzkHjeQHK7Tj1s1Q/Dv5E/pj:0R1UdZHRbZrjOH6oKuZzkdq/j1sGspj
TLSH
T1BA57337162855CED8063CA6E2819613CF10503FD9AE2F2769F7FAFF29ADE24451D980C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  welovelarping.rar
- Size 26.9MB
- SHA256 e0b5feedf8e8c0beee4be1bb8890e485be798d056e46b558f0d9a1e0e12e0cd2
- MD5 7f025e53d5953aa71c56740968991b91
- SHA1 af6ae609100603609620d2c159bf57f0e948efec
- SHA512 1ae02043c66731c6242a4f721c984c7209fcfebac4a59b4b6d94f72595343c25081442f23b079b19d9d56fbb53064473938dd5fd8255145b03503ba7aa484823
- SSDEEP 393216:C+VmLQo1ULZoUHUkbSOrjx25BH6oKuqitzkHjeQHK7Tj1s1Q/Dv5E/pj:0R1UdZHRbZrjOH6oKuZzkdq/j1sGspj
- TLSH
  T1BA57337162855CED8063CA6E2819613CF10503FD9AE2F2769F7FAFF29ADE24451D980C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  welovelarping/welovelarping/.vs/LarpTool.slnx/FileContentIndex/2c984f42-27fe-45a1-8bac-e5d781208311.vsidx
- Size 36KB
- SHA256 41f538c9a0b164cb8bf2effceec70c13bd00b2f31f46191812d474d191b44e3a
- MD5 4f615208e8a719111de852967fd959a2
- SHA1 89e9bf9479f77175cdadd44fcacf129d4935d62d
- SHA512 243070ba0f639eb4112321c46ec0ec5f4e98c76899931877c258892d8fc7970eb716a3b9521568a11b5f1693b105fc18aa5b2565a2fd39aa062a8ad431a63599
- SSDEEP 768:5b0iYgCRbDA/e7tq+M8R2sjtmtsBWqs/9xbm5TlI9MRJbHT:Gp557In8QshC5/95mTzbHT
- TLSH
  T150F21D5A8BC5EE27CC3900B268FA0FA47330D9C97B5383471A2E717D3D867E4599A219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral3 behavioral4
- Target
  welovelarping/welovelarping/.vs/LarpTool.slnx/FileContentIndex/4473f2cf-0b39-44dd-a0a1-d74a88569e01.vsidx
- Size 78KB
- SHA256 37f6cbe4cf66374146c54ec98107f54378e355a63d986c7b31a8cb64fa474c79
- MD5 8c471a9dffd1fa61e6efba821a50ef0a
- SHA1 6286918480d00fa660fd4040278ee150a49216c3
- SHA512 991096041c762fb065fdda4376e385fbcd5076bb2fc1b0f3a8f1eaa3169b1b19fbe44652777e6ad8f1bee8343bb2c36c83f3c88a5a3e7d2700cc139cc60ee45f
- SSDEEP 1536:+ld8dSr2MU4ZYsMD09q/AV5zmxjywr/uXNziyFTlOWbGVcY3TfleQZ0PWZ:NKR2sQX/AVsxm2WXNzFsSHYjfl9WC
- TLSH
  T19873928ACBC0EB2AC838467594FF0B943338D58476474B2B337AE1766D573D26AD2358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral5 behavioral6
- Target
  welovelarping/welovelarping/.vs/LarpTool.slnx/FileContentIndex/885d924f-476b-46e6-8205-fe1f53e67811.vsidx
- Size 219B
- SHA256 f57d49b274adec8c3e82dc86a2c053621298afde62bcb259153b1023c0b67edc
- MD5 1857cc76793642edd209820fbb365e72
- SHA1 ecfc4ad4b7327c754ce48d1ec53c7c9abfbe2464
- SHA512 c8b031a5643ac44ff05fd7a160e402d1411ea8351962660b8bb1b005059802f4b6a000bde7a4975329bcb3102b96e5356e93384a09c8ca3f61ab318bd26e83cf
- TLSH
  T1DBD02B54CCC0D4EFF01C307D973B46C901C016A10C00AF0C33D20904705BC3601C50C7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral7 behavioral8
- Target
  welovelarping/welovelarping/.vs/LarpTool.slnx/v18/.wsuo
- Size 19KB
- SHA256 2758af2cecc42d9536f0f7d4e636c42cb85d7f0fc640a5fbf2766003f2d1b2c7
- MD5 39b4462c340368b4f53e88cad33bde89
- SHA1 9855caadcd70ae8b3d24b9baae15a0d8bc43c7f6
- SHA512 ec449cb8bc149e2b7d8904f97b463ecba696da83a745f58135f5d48a2323d660d2ed92b73adeac493f438be5c8c822c6cd1ffb47ed35620d1fd483b6d3731c22
- SSDEEP 96:O9f8zU/m2KxgICP+yVhgQM8zU/MB7ApjMAlsSM4TeWtjTIp7+NXqwRuAYe8yNHIe:OtR8xgeyViRQUVqjiYeP9IRx6ro5js6k
- TLSH
  T1D892965073F8C558F3B70F752DBAD699543ABC23AE92E10F3191734E0832A64C4A0B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral10 behavioral9
- Target
  welovelarping/welovelarping/.vs/LarpTool.slnx/v18/Browse.VC.db
- Size 38.1MB
- SHA256 8ad15e880fa352f06e8a2b4b8960fc119292a2ec1921861eb6d80e4121947d07
- MD5 4d8c7cdcfa77f796067999f4e9767d2f
- SHA1 de43afb1b51ca574110529bf26a20b23304a913b
- SHA512 a3c1193da95775b14617c2d9ae002ad8d32935d16cc92de54cd0ab396bccdefc914ee82c8b6130f1cce307ac9c5241ec0d7191596b93c2f64b750fa0b01339e4
- SSDEEP 393216:mze1Q5ZA3uafrH+a6KMkmL5UQQz8gtdS1zFI0rdpzoECABhbw1p32cyTKqphlN:HlfhPtdStlZ+EpcyTKqphlN
- TLSH
  T1EE973A723A0E8177F9FCC4F77ABF05941722E9D8E78059ABA001036759DDB853A2294F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral11 behavioral12
- Target
  welovelarping/welovelarping/.vs/LarpTool.slnx/v18/DocumentLayout.json
- Size 3KB
- SHA256 0584e4697d2c26668ce690ddb1fab16e3a7e016b5413374772b52900b199ba0a
- MD5 6ec67eaf6904b9cc35a094a45c422730
- SHA1 13ab1cfcad357bfceb31d3b197e3d2506db8aec5
- SHA512 03b6e62c93448238e0a232469a9359ea82839be1bf727f8eb9c0a21860ba65d2c2fe52735c064c50033a85a2d8f4c467f0b3a71df20840492a15fddd93dbdf74
- TLSH
  T193719BBAD550DCAB22BC17605AB8C38DFC8907AB64A0241F327D454C5F35D2A45CAFAF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral13 behavioral14
- Target
  welovelarping/welovelarping/.vs/LarpTool.slnx/v18/ipch/AutoPCH/ebe499a75289bc64/LARP_SERVER.ipch
- Size 106.2MB
- SHA256 3bf78e6c87e192430721c844be8002e8d9356eba4d8d02b2cb3508d85585e158
- MD5 bfc41bc931537e43879ffc50ccc4728c
- SHA1 87d9bb366ef1656499fc80f6dde65a30b2480a62
- SHA512 9449169947ef5f2a7042479e2a8281dc7ec90b6bc6b16aec60c2bbab1fa0e5f5ddeaf2fbcc313b757bd22f53f7552c8d8580300ee306ece1d8db93e28372b6d5
- SSDEEP 393216:szFj1hbX3sc0ie3lopwpw9rHpGmnUDkoNaFy/UesLjQM4pHaOvHd6MsO5T3LuNGj:/M4pZTPq
- TLSH
  T14438D501EBA35D52C6F4073019F75B943B38E95E8B428B2F6298E6FD6E572843CE3254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral15 behavioral16
- Target
  welovelarping/welovelarping/.vs/ProjectSettings.json
- Size 46B
- SHA256 772765edcdd60133c4cd63d30be1263b87deac17d1ae657943d95b3b77c7a697
- MD5 b5717dab97eafb37bb4c689af553557e
- SHA1 c326adf7088dc2e905aed7f65898b2898395fa65
- SHA512 b460babe68d761ad53eeeefdc3380c74bb2804678e8d53e328986143266e4821e37544ae96cf89052e91dd2773dded2bc3fa08a925f8738d61e29f8bb4d72d1e
- MD5 SHA1 SHA512
Score

3^/10

discovery execution
behavioral17 behavioral18
- Target
  welovelarping/welovelarping/.vs/VSWorkspaceState.json
- Size 118B
- SHA256 93ac26cc15ae3ad4b629c75b6afcda623b5c5887c741f33c3c5246fe06610153
- MD5 267be358a59e3ed66aa0e7096db7fbfa
- SHA1 cfe849ef2fde9db6d74ef58d3c167120afdb669f
- SHA512 f442a750cf2399205041936a65f5497df0790bc30595bf28ff63a063781603591a1ba8b5930dc7d92976bdd0af9f8499fb7489842081e132ce9cd373c5a4e9b9
- TLSH
  T125B09267BE55042F213A2AA84889D182A2602A0B9A641C49BB320A28226050659A9BCA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral19 behavioral20
- Target
  welovelarping/welovelarping/.vs/slnx.sqlite
- Size 88KB
- SHA256 6e3611a252d1361027ea0a6ea109511cafa2abe2521ccfb502eaf21cecf28920
- MD5 fe3e190dc253ed604ac0cc924cab6907
- SHA1 2e39067c79d9fb126431dd18fe94607cb62b41a2
- SHA512 c03ad6b9745c487a9153d81169d88e31cba99ffce181a4efd0040d2bb653f95473b32e139b81d6cdba1c7f85c6bd646ba28db1df798e69a95335c50cd6e72e26
- SSDEEP 192:0GThURYbTK6SktS+lfA1DtZudA+L0mWMedRCxTVgEUfNku/ABFz73R6FGThURYbg:42ZVUf2sApKm7M15MG
- TLSH
  T1E293216E3758BD49C2706339E8A39992D934123B9531C5327CFE1268CFB3A0457B9BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral21 behavioral22
- Target
  welovelarping/welovelarping/CppProperties.json
- Size 384B
- SHA256 886ca12ef7803397a308fff0d9fd295ce01bcfae320285bbeafdd0da65f5bee5
- MD5 20bb23381daa680c9f71e0ae91dbfc71
- SHA1 99adfeaaa3c98f55e47133eddb89eaf564f8772d
- SHA512 af83e350c166767fbacd99b62cc19eaa23bc71bdf763e75b0fa9330179e3422929575d4f285b76077e6564427ed2dbdc3729c91f74fa27d7041cf6350a00eee6
- TLSH
  T1B5E08C77C62D0D0A12B867EDAEDD8806F52483BB4680080AB8BD158C5FB6517445BE29
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral23 behavioral24
- Target
  welovelarping/welovelarping/avatarRenderer.js
- Size 15KB
- SHA256 d5e03ade92249bb700dc1b551001e73b3b3c038ea78798a8b85d1d305f11b8ab
- MD5 11a433a9a1c3fe3dc5fee0961ef1bc1e
- SHA1 d88e5170282d1b563d888c2f3fb9f488b28f9747
- SHA512 9a194cbbfb94191cf25db3dd121711b5ac1d7398087a1dc07069872589e4acab9e5b89c522a2c86b7fc29da3a514dada4afef4739ac1e3d45913d412e9eb6855
- SSDEEP 384:v5Qg/lqAomMOEZ4/jyPW9HVj7sK4JGXYVXEGMOPZtwl:Jis4qx34eLl
- TLSH
  T1AE7231F40D93A8213AB3D26CC6565064DF27722736154253FA7CB6842FFD05C52E2EB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral25 behavioral26
- Target
  welovelarping/welovelarping/content.js
- Size 4KB
- SHA256 73ce1e0f286328f80dbcfa01c1176663ebf4384fb0121d5d0d15042f7d76c12c
- MD5 e0e2aabeb5646a4f53f9f4a6757d0efe
- SHA1 76777e68ce09d63a5ec9340a15c3c9d74233692f
- SHA512 9c9897bf681d2e686a7292c4e7c52682b3ae16a773eb29051397d5f3502e991b4b5f227dff80b3a2a2bfdfa484ddcfbb0aaae35f67b863c3e939c36eea15b0ec
- SSDEEP 96:yZFH4zyvu1OBQEity0QB99ZxCJFwGEx7I:yjCQuuxqy/BbZAANx7I
- TLSH
  T101810FCC586301682DB3112C9F2BD119FF26747711056214BE8EDA582FB186EA3EDFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral27 behavioral28
- Target
  welovelarping/welovelarping/hook.js
- Size 1KB
- SHA256 99eae9fe064224fa626ea810a7fa8ecf146e68ecd27d30de4b25675cab18dcc6
- MD5 662be25f131c4f721fd0ffcc9a5fed82
- SHA1 0dc1b279c190f668485b602b99d930c819eb4654
- SHA512 766c99fb3a2796f19437b2722e87706ff4ce5f1ef77aafeb2136cc03914ffc80388a25d0b8b4d77de0dafa0887a44305ce97045bdfce24aa0b4337b4e70e8033
- TLSH
  T17541F29AA4D41111873263B69F63B614FB2B247721864154BF9DE2843FB141FE351FEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral29 behavioral30
- Target
  welovelarping/welovelarping/icons/icon128.png
- Size 747B
- SHA256 2794ececfed5df8ab32ac0f3827468af574499a9ee31e67bda34876a17be2dba
- MD5 2d007ce37070d82fc0cf8db27cf053a9
- SHA1 7811d67a811caa26c2de8786a0301dfc76f5ab2f
- SHA512 f525914f7900c001dba49b1be9653a592aa4aa2dbf4b389cbd6b4d3f080f1879000c141ba3e21b62f4b0179ef39ffc5a58bca3e31382fce53c6453de8547c9ab
- TLSH
  T1040102F1370E1D61CA9FD94B172104706F79D0D67D1C2C1A65F8B0A93D2020646E3B00
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Service Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32