Resubmissions
01/04/2024, 01:36
240401-b1es5ahh6v1028/04/2023, 03:51
230428-eegx5sbe78828/04/2023, 02:53
230428-ddldhabc788Analysis
- max time kernel
135s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
- submitted
28/04/2023, 02:53
General
- Target LDPlayer9_es_com.projz.z.android_3210_ld.exe
- Size 3.6MB
- Sample230428-ddldhabc78
- SHA256 2bccda899132b8287824b9c2bde2c6562ac12d36365fcd5720d64d20e3b9c009
Score
4/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious behavior: EnumeratesProcesses 5 IoCs
- Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LDPlayer9_es_com.projz.z.android_3210_ld.exe"C:\Users\Admin\AppData\Local\Temp\LDPlayer9_es_com.projz.z.android_3210_ld.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
ds.dll
ds.dll
ds.dll
ds.dll
memory/2600-152-0x00000000067B0000-0x00000000067C0000-memory.dmp
memory/2600-151-0x0000000072FB0000-0x0000000072FC4000-memory.dmp
memory/2600-156-0x00000000093D0000-0x0000000009974000-memory.dmp
memory/2600-163-0x00000000091C0000-0x0000000009252000-memory.dmp
memory/2600-164-0x0000000009E60000-0x0000000009EFC000-memory.dmp
memory/2600-165-0x0000000009DC0000-0x0000000009E26000-memory.dmp
memory/2600-166-0x000000000A430000-0x000000000A95C000-memory.dmp
memory/2600-167-0x00000000067B0000-0x00000000067C0000-memory.dmp