General
- Target LDPlayer64_ru_1297_ld.exe
- Size 2.5MB
- Sample240217-n2wt9aee4s
- SHA256 afb0799fe06bbecd32e6dd5577dc49441292c6a4db6656862ce56ce9d7541d85
- MD5 35f69a6a970b2847c850491fff8a269f
- SHA1 8d6d81d0360512712faad65c88cf0aed9e160095
- SHA512 557acb3d8facbd996ed3d21e74832131478e85c0709ddd622d488ecf370a5789591f16d6466b308126e2bd942050f1f650256529f65b1c923bae3ba9bd3fb522
- SSDEEP 24576:RV/15+PUX5lfV/G7lPgGXA3TrbfbNlnpcPKOvzmXyf9izzV1G926/kvppVUm4Re9:2OlfVO7l/o4KXyf9iN1+kx0Rbe78VgXv
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
LDPlayer64_ru_1297_ld.exe
Resource
win11-20240214-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target LDPlayer64_ru_1297_ld.exe
- Size 2.5MB
- SHA256 afb0799fe06bbecd32e6dd5577dc49441292c6a4db6656862ce56ce9d7541d85
- MD5 35f69a6a970b2847c850491fff8a269f
- SHA1 8d6d81d0360512712faad65c88cf0aed9e160095
- SHA512 557acb3d8facbd996ed3d21e74832131478e85c0709ddd622d488ecf370a5789591f16d6466b308126e2bd942050f1f650256529f65b1c923bae3ba9bd3fb522
- SSDEEP 24576:RV/15+PUX5lfV/G7lPgGXA3TrbfbNlnpcPKOvzmXyf9izzV1G926/kvppVUm4Re9:2OlfVO7l/o4KXyf9iN1+kx0Rbe78VgXv
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Creates new service(s)
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
-
Possible privilege escalation attempt
-
Modifies file permissions
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1