General
- Target lapr.bat
- Size 607B
- Sample260825-21plfabb49
- SHA256 f13b93c0627bb748f48c6aea72af2100550d0c74cdbd86f59be83174979fa969
- MD5 0f390e0ab45f8453cad4cdb8012ad695
- SHA1 d04c603c208acba2eca8850e42b6c173d05924c9
- SHA512 3a7dc73674fed2f04046d04ecdf213c2aad736fc79f91372f7f577bef08335dbe6a2786ed3934b4aadc348f7f539e13615cc14a383ef7eab6dfedac2bd3232f0
- TLSH T1E9F02B572C0D696A0279CE40E4970A78EF0682975762948C7822901C9FBC8A3E4BFAE5
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
lapr.bat
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
lapr.bat
Resource
win11ltsc2024-20260709-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target lapr.bat
- Size 607B
- SHA256 f13b93c0627bb748f48c6aea72af2100550d0c74cdbd86f59be83174979fa969
- MD5 0f390e0ab45f8453cad4cdb8012ad695
- SHA1 d04c603c208acba2eca8850e42b6c173d05924c9
- SHA512 3a7dc73674fed2f04046d04ecdf213c2aad736fc79f91372f7f577bef08335dbe6a2786ed3934b4aadc348f7f539e13615cc14a383ef7eab6dfedac2bd3232f0
- TLSH T1E9F02B572C0D696A0279CE40E4970A78EF0682975762948C7822901C9FBC8A3E4BFAE5
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.