Overview

overview

8

Static

static

1

larpcord-l...ME.vbs

windows10-2004-x64

5

larpcord-l...ME.vbs

windows11-ltsc_2024-x64

5

larpcord-l...up.bat

windows10-2004-x64

8

larpcord-l...up.bat

windows11-ltsc_2024-x64

8

larpcord-l...ls.ps1

windows10-2004-x64

3

larpcord-l...ls.ps1

windows11-ltsc_2024-x64

3

larpcord-l...dex.js

windows10-2004-x64

3

larpcord-l...dex.js

windows11-ltsc_2024-x64

3

larpcord-l...ord.js

windows10-2004-x64

3

larpcord-l...ord.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    larpcord-larp10.zip
  • Size 94KB
  • Sample261030-w8kdss1thx
  • SHA256 fdd344c5a7fa0ae9ea4babc84f1c0eb1d131d3a4ee695a0dce30a5eab11615de
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecution

Malware Config

Targets

    • Target
      larpcord-larp10/README.md
    • Size 4KB
    • SHA256 d56568e5dedd9a3c3fe205c8827e148018552b332ee7441a100a4a438c8d4742
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    execution

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral1behavioral2
    • Target
      larpcord-larp10/auto-setup.bat
    • Size 8KB
    • SHA256 65cfb28161a537a45a9802e035c94077c9ee5d374282f20908077d066297fb1b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery
    behavioral3behavioral4
    • Target
      larpcord-larp10/ensure-tools.ps1
    • Size 5KB
    • SHA256 86594f0c1d28d1fda059ba703fb40b6f1a23491e56bcb7cf0b9af29666d33501
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      larpcord-larp10/larp/index.tsx
    • Size 208KB
    • SHA256 d3acb3ca3df711e733c8511217b2c8d289f25a0cbc62fb4e0e56bddc9062c219
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      larpcord-larp10/patch-discord.mjs
    • Size 7KB
    • SHA256 5f75d4bd0aaf3eeee362801d20694de136ce4e025735a3f975dcff14e89adbd0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks