LDPlayer9_es_com[.]projz[.]z[.]android_3210_ld[.]exe

Resubmissions

01/04/2024, 01:36

240401-b1es5ahh6v10

28/04/2023, 03:51

230428-eegx5sbe788

28/04/2023, 02:53

230428-ddldhabc788

Sharing

Copy URL Twitter E-mail

General

Target
LDPlayer9_es_com.projz.z.android_3210_ld.exe
Size 3.6MB
Sample230428-ddldhabc78
SHA256 2bccda899132b8287824b9c2bde2c6562ac12d36365fcd5720d64d20e3b9c009
MD5 d534ec979305cb79edd861760de997d8
SHA1 0152e7516a813b06c67a10b713260377d0f97131
SHA512 7e6e494fe2c086cc3668f2fbf8184b8ff9d271565e2af258eef0c81ce22bd6b3c3e008cce77542dafc80040f60f659ff3263bb66e14e62ddc26f251db36805be
SSDEEP 49152:mOKT1DxX1gvw9qcQr1ULjFvnxe2T9g4tGOPtSlX:mOY1N1g49Kr1ULxvxew9g1/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

LDPlayer9_es_com.projz.z.android_3210_ld.exe

.exe 3.6MB

LDPlayer9_es_com.projz.z.android_3210_ld.exe

IMPHASH d4760bd429d30c812f7b07bc64aa8d77
SHA256 2bccda899132b8287824b9c2bde2c6562ac12d36365fcd5720d64d20e3b9c009
MD5 d534ec979305cb79edd861760de997d8
SHA1 0152e7516a813b06c67a10b713260377d0f97131
SHA512 7e6e494fe2c086cc3668f2fbf8184b8ff9d271565e2af258eef0c81ce22bd6b3c3e008cce77542dafc80040f60f659ff3263bb66e14e62ddc26f251db36805be
SSDEEP 49152:mOKT1DxX1gvw9qcQr1ULjFvnxe2T9g4tGOPtSlX:mOY1N1g49Kr1ULxvxew9g1/
MD5 SHA1 SHA512 SSDEEP

windows x86

Digest

fd:ec:16:5d:a6:a3:84:d2:3a:40:09:88:5d:eb:62:03:2e:20:d4:53:41:6f:da:64:de:0d:85:2c:40:aa:54:2d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Digest

90:2b:33:5b:21:fc:e7:69:bc:06:6d:61:f3:8b:20:f0:0a:14:8e:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bf

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 24, 2021 - Nov 26, 2024

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bf

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 24, 2021 - Nov 26, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

851737

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegQueryValueExW RegDeleteValueW OpenProcessToken DuplicateTokenEx RegCreateKeyW CryptImportKey RegOpenKeyW CryptGetHashParam CryptGenRandom CryptAcquireContextA CryptDestroyKey CryptEncrypt CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash

ws2_32

htonl ntohl gethostname sendto recvfrom WSAStartup freeaddrinfo getaddrinfo WSAIoctl htons getsockopt getsockname getpeername WSASetLastError select __WSAFDIsSet WSAGetLastError accept listen closesocket shutdown recv send connect bind ioctlsocket setsockopt socket WSACleanup gethostbyname inet_addr ntohs

crypt32

CertFreeCertificateContext

wldap32

ord32 ord46 ord211 ord301 ord200 ord30 ord79 ord35 ord33 ord143 ord27 ord26 ord22 ord41 ord50 ord45

kernel32

GetFileSizeEx GetFileSize MoveFileExW FindFirstFileW FindNextFileW DeleteFileW FindClose RemoveDirectoryW GetModuleFileNameW ReadFile WriteFile SetFilePointer GetExitCodeProcess GetStdHandle CreateProcessW OpenProcess TerminateProcess GetModuleHandleW GetProcAddress Sleep GetStartupInfoW CreateToolhelp32Snapshot Process32FirstW Process32NextW K32EnumProcessModules K32GetModuleFileNameExW GetWindowsDirectoryW LoadLibraryW MultiByteToWideChar WideCharToMultiByte GetVersionExW CreateMutexW GetLocalTime GlobalLock GlobalUnlock GlobalAlloc GlobalFree GetProcessHeap HeapAlloc HeapFree GetCurrentProcess GetDiskFreeSpaceExW GetVolumeInformationW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentThreadId GetTickCount FindResourceW LoadResource FreeResource SizeofResource LockResource WritePrivateProfileStringW WritePrivateProfileStringA RaiseException InitializeCriticalSectionAndSpinCount FindResourceExW DecodePointer HeapDestroy HeapReAlloc HeapSize SetLastError GetLogicalDriveStringsW GetDriveTypeW DeviceIoControl DuplicateHandle FreeLibrary CreateDirectoryW FormatMessageA GetTickCount64 InitializeCriticalSectionEx SleepEx VerSetConditionMask GetSystemDirectoryA GetModuleHandleA LoadLibraryA VerifyVersionInfoA WaitForSingleObjectEx GetFileType PeekNamedPipe CreateFileW GetFileAttributesExW SetEndOfFile GetFullPathNameW SetEnvironmentVariableA WriteConsoleW GetTimeZoneInformation SystemTimeToTzSpecificLocalTime FindFirstFileExW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter ReadConsoleW FlushFileBuffers GetConsoleMode GetConsoleCP UnregisterWaitEx InitializeSListHead ReleaseSemaphore VirtualProtect VirtualFree VirtualAlloc FreeLibraryAndExitThread GetThreadTimes OutputDebugStringW GetOEMCP IsValidCodePage AreFileApisANSI GetModuleHandleExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW CreateSemaphoreW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo FileTimeToSystemTime GetFileInformationByHandle FileTimeToLocalFileTime SetFilePointerEx GetCommandLineW UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask SetEvent CloseHandle GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation TlsFree TlsSetValue TlsGetValue TlsAlloc GetThreadPriority SetThreadPriority SwitchToThread SignalObjectAndWait QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList CreateTimerQueue RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent LoadLibraryExW ExitThread CreateThread GetCurrentProcessId GetUserDefaultUILanguage MulDiv ExitProcess GetCurrentDirectoryW GetACP GetStringTypeW EncodePointer GetSystemTimeAsFileTime GetCurrentThread TerminateThread WaitForSingleObject CreateEventW GetLastError WaitForMultipleObjects

user32

SetFocus GetWindow IsWindowVisible GetGUIThreadInfo InvalidateRgn CreateAcceleratorTableW MoveWindow MonitorFromWindow GetMonitorInfoW EnableWindow CharNextW GetActiveWindow GetFocus GetKeyState SetCapture ReleaseCapture GetUpdateRect RegisterClassExW GetSysColor ClientToScreen SetCaretPos ShowCaret HideCaret CreateCaret SetRect FillRect CharPrevW GetCaretPos GetCaretBlinkTime GetWindowTextLengthW GetWindowTextW SetWindowRgn IsZoomed IsRectEmpty IntersectRect MapWindowPoints ScreenToClient LoadCursorW EndPaint BeginPaint LoadBitmapW GetParent DrawTextW GetClientRect GetPropW SetPropW FindWindowExW RegisterClassW wsprintfW SetWindowTextW PostQuitMessage CloseWindow MessageBoxW DestroyWindow SetWindowLongW CreateWindowExW PostMessageW DefWindowProcW PtInRect GetCursorPos ReleaseDC GetDC SetWindowPos BringWindowToTop SetForegroundWindow ShowWindow GetWindowLongW SendMessageW IsIconic KillTimer SetTimer GetWindowRect wvsprintfW SetCursor UnionRect OffsetRect GetMessageW TranslateMessage DispatchMessageW CallWindowProcW IsWindow GetClassInfoExW InvalidateRect

gdi32

SetBkColor StretchBlt SetStretchBltMode CreateDIBSection CreatePenIndirect CombineRgn CreatePatternBrush GetObjectA CreateRoundRectRgn ExtSelectClipRgn GetTextMetricsW SaveDC RestoreDC Rectangle CreatePen CreateFontIndirectW MoveToEx TextOutW SelectClipRgn ExtTextOutW RoundRect LineTo GetTextExtentPoint32W GetClipBox GetCharABCWidthsW SetWindowOrgEx CreateSolidBrush SetBkMode SetTextColor CreateFontW DeleteObject BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC GetStockObject GdiFlush GetObjectW CreateRectRgnIndirect DeleteDC GetDeviceCaps

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteExW ShellExecuteW SHGetFolderPathW SHGetMalloc ord165

ole32

CoCreateInstance CoTaskMemFree CreateStreamOnHGlobal OleLockRunning CoInitialize CLSIDFromString CoUninitialize CLSIDFromProgID

oleaut32

SysFreeString SysAllocString VariantClear VariantInit

shlwapi

PathFileExistsW StrStrIA PathIsRootW

wininet

InternetCloseHandle InternetOpenW InternetConnectW HttpOpenRequestW HttpSendRequestExW HttpEndRequestW HttpQueryInfoW InternetReadFile HttpSendRequestW

iphlpapi

GetAdaptersInfo

comctl32

_TrackMouseEvent ord17

imm32

ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow ImmGetVirtualKey ImmGetContext

gdiplus

GdipDrawImage GdipImageGetFrameDimensionsCount GdipGetImageHeight GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneBrush GdipDeleteBrush GdipCreateLineBrushI GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipCreateFromHDC GdipDeleteGraphics GdipSetCompositingQuality GdipSetSmoothingMode GdipSetPixelOffsetMode GdipSetTextRenderingHint GdipSetInterpolationMode GdipGraphicsClear GdipGetImageWidth GdipDrawImageRectI GdipDeleteFontFamily GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipDeleteFont GdipGetFamily GdipDrawString GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipLoadImageFromStream GdipImageGetFrameDimensionsList