Overview
overview
8Static
static
3NewLifeRol...up.exe
windows11-21h2-x64
8$PLUGINSDI...up.exe
windows11-21h2-x64
6$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...st.exe
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...id.ps1
windows11-21h2-x64
6$PLUGINSDI...86.exe
windows11-21h2-x64
4launcher/n...er.exe
windows11-21h2-x64
6launcher/w...QB6.js
windows11-21h2-x64
3launcher/w...x.html
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
121s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/10/2026, 20:31
Static task
static1
Behavioral task
behavioral1
Sample
NewLifeRoleplay-Setup.exe
Resource
win11-20260911-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/MicrosoftEdgeWebview2Setup.exe
Resource
win11-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/dxredist/directx_Jun2010_redist.exe
Resource
win11-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/set-lnk-aumid.ps1
Resource
win11-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/vc_redist.x86.exe
Resource
win11-20260911-en
Behavioral task
behavioral9
Sample
launcher/nlrp_launcher.exe
Resource
win11-20260911-en
Behavioral task
behavioral10
Sample
launcher/web/assets/index-CebXhQB6.js
Resource
win11-20260911-en
Behavioral task
behavioral11
Sample
launcher/web/index.html
Resource
win11-20260911-en
General
- Target launcher/web/assets/index-CebXhQB6.js
- Size 192KB
- Sample261029-zar8jaex2x
- SHA256 eb740d9ac73199b94c7f01c83ef19061da1306d8a9bfbefb1c841bdf55a35e42
- MD5 0343c670bb537938d3997ad7f36023ee
- SHA1 f5da2c7d2db7384b77ff91021e302029a5da0b17
- SHA512 226b9b49f4b9bd93b104d586fd3a66d75a98ccde23c7ab3b647f79b0d074bf7dae38dc0ebf42c7c30e5cbc8e4a141635c41ffd624c5f6f98471276e58b3c7b0e
- SSDEEP 3072:KQMcLV1H+OeZUZU0Dd3w8uosZ2Wkwa8Ds:zq/ZUZU0Dd3PJdXn
- TLSH T194143BE8B09DB655FFA347A520AF0107733D1923681D4860B224EDAA67F504661BFFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs