6870e8dbcfaf543500add1d303de528c34e3b1f4d4424b0097c4ffb408a44fcd

Analysis

max time kernel
283s
max time network
297s
platform
windows10-2004_x64
resource
win10v2004-20240226-es
resource tags

arch:x64arch:x86image:win10v2004-20240226-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
06-04-2024 20:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LDPlayer9_es_38241457_ld.exe
Size

3.3MB
MD5

7c2e5ef59e9589422bcd5bf3726fbcb1
SHA1

c4dac6966ac4cd3500d6a7fe44138a0db639d507
SHA256

6870e8dbcfaf543500add1d303de528c34e3b1f4d4424b0097c4ffb408a44fcd
SHA512

28870d9cb07f964ba0ecedfb25762cb4530bda869cc717dd4fffcd176085f03c05fd129b23e826dd6ac33ae6af8132bf9dc317ebffb52448b83236ad2349ca45
SSDEEP

49152:XZi5hu7I/BzfK/ZHg1pHtOUYqP3CFOrtG/RR9sXafgkDFMVR9C1UhPJXMK701hOw:XI5ht/BzfKW1t0xOouBiCV2Ht

Score

4^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Loads dropped DLL 3 IoCs

Processes:

LDPlayer9_es_38241457_ld.exe

pid process

1588 LDPlayer9_es_38241457_ld.exe
1588 LDPlayer9_es_38241457_ld.exe
1588 LDPlayer9_es_38241457_ld.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

Processes:

LDPlayer9_es_38241457_ld.exe

pid	process
1588	LDPlayer9_es_38241457_ld.exe
1588	LDPlayer9_es_38241457_ld.exe
1588	LDPlayer9_es_38241457_ld.exe
1588	LDPlayer9_es_38241457_ld.exe
1588	LDPlayer9_es_38241457_ld.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes:

LDPlayer9_es_38241457_ld.exe

description	pid	process
Token: SeDebugPrivilege	1588	LDPlayer9_es_38241457_ld.exe
Token: SeShutdownPrivilege	1588	LDPlayer9_es_38241457_ld.exe
Token: SeCreatePagefilePrivilege	1588	LDPlayer9_es_38241457_ld.exe

C:\Users\Admin\AppData\Local\Temp\LDPlayer9_es_38241457_ld.exe
"C:\Users\Admin\AppData\Local\Temp\LDPlayer9_es_38241457_ld.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1588

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\Setup\ds.dll
Filesize
67KB

MD5
7d5d3e2fcfa5ff53f5ae075ed4327b18

SHA1
3905104d8f7ba88b3b34f4997f3948b3183953f6

SHA256
e1fb95609f2757ce74cb531a5cf59674e411ea0a262b758371d7236c191910c4

SHA512
e67683331bb32ea4b2c38405be7f516db6935f883a1e4ae02a1700f5f36462c31b593e07c6fe06d8c0cb1c20c9f40a507c9eae245667c89f989e32765a89f589

Download Submit
memory/1588-12-0x0000000006140000-0x0000000006150000-memory.dmp

Filesize
64KB

Download
memory/1588-16-0x0000000006190000-0x00000000061A4000-memory.dmp

Filesize
80KB

Download
memory/1588-18-0x0000000073550000-0x0000000073D00000-memory.dmp

Filesize
7.7MB

Download
memory/1588-17-0x0000000073EA0000-0x0000000073EB4000-memory.dmp

Filesize
80KB

Download
memory/1588-19-0x0000000008CB0000-0x0000000009254000-memory.dmp

Filesize
5.6MB

Download
memory/1588-20-0x00000000045E0000-0x0000000004672000-memory.dmp

Filesize
584KB

Download
memory/1588-21-0x0000000009960000-0x00000000099A4000-memory.dmp

Filesize
272KB

Download
memory/1588-22-0x0000000009A40000-0x0000000009ADC000-memory.dmp

Filesize
624KB

Download
memory/1588-23-0x0000000009AE0000-0x0000000009B46000-memory.dmp

Filesize
408KB

Download
memory/1588-24-0x00000000099E0000-0x00000000099FC000-memory.dmp

Filesize
112KB

Download
memory/1588-25-0x000000000A180000-0x000000000A6AC000-memory.dmp

Filesize
5.2MB

Download
memory/1588-26-0x0000000009E30000-0x0000000009F32000-memory.dmp

Filesize
1.0MB

Download
memory/1588-27-0x000000000A090000-0x000000000A0D0000-memory.dmp

Filesize
256KB

Download
memory/1588-28-0x0000000006140000-0x0000000006150000-memory.dmp

Filesize
64KB

Download
memory/1588-29-0x0000000073550000-0x0000000073D00000-memory.dmp

Filesize
7.7MB

Download