f0700578852e3a8e9118abf95244cb466bed816ec09cd7b2511a51a7aad25493 | Triage

Sharing

General

Target

LDPlayer9_es_1009_ld.exe
Size

2.5MB
Sample

230804-3vq3ragb6z
MD5

39f83c11bb2fb449e17f31f2b4e0c013
SHA1

c64ae85e49356e6c98c8cf1100ee94cd66f111dc
SHA256

f0700578852e3a8e9118abf95244cb466bed816ec09cd7b2511a51a7aad25493
SHA512

c4adc6b5cd5d858b89324e8bed1ebf2d9c6b8e35941b4fd279dd06c9969c50e7fec724f118ac72e2833963e75481023a8c01e686b2ba149aae318d3dd986a996
SSDEEP

24576:n8hSKj9UQgQEZ+f0KIbl6weNy5uwuPQW2AK0P612926/kvppVUm4ReeIUaE6EH:n8hNjqQb8xs6AKZ1ukx0Rb7aE6EH

Score

8^/10

discovery evasion exploit persistence

Malware Config

Targets

- Target
  
  LDPlayer9_es_1009_ld.exe
- Size
  
  2.5MB
- MD5
  
  39f83c11bb2fb449e17f31f2b4e0c013
- SHA1
  
  c64ae85e49356e6c98c8cf1100ee94cd66f111dc
- SHA256
  
  f0700578852e3a8e9118abf95244cb466bed816ec09cd7b2511a51a7aad25493
- SHA512
  
  c4adc6b5cd5d858b89324e8bed1ebf2d9c6b8e35941b4fd279dd06c9969c50e7fec724f118ac72e2833963e75481023a8c01e686b2ba149aae318d3dd986a996
- SSDEEP
  
  24576:n8hSKj9UQgQEZ+f0KIbl6weNy5uwuPQW2AK0P612926/kvppVUm4ReeIUaE6EH:n8hNjqQb8xs6AKZ1ukx0Rb7aE6EH
Score

8^/10

discovery evasion exploit persistence
- Creates new service(s)
  persistence
- Downloads MZ/PE file
- Possible privilege escalation attempt
  exploit
- Stops running service(s)
  evasion
- Modifies file permissions
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

File and Directory Permissions Modification

Impair Defenses

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2

discoveryevasionexploitpersistence