Analysis
- max time kernel
1168s - max time network
1169s - platform
windows10-2004_x64 - resource
win10v2004-20240508-es - resource tags
- submitted
28/06/2024, 18:18
General
- Target LDPlayer9_es_1009_ld.exe
- Size 3.4MB
- Sample240628-wxt4vs1erl
- SHA256 5f1ee7eac585adb1a5279041b286b4adff6ff9d29d459ca0dd05bb0d2bfe26d2
Score
4/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LDPlayer9_es_1009_ld.exe"C:\Users\Admin\AppData\Local\Temp\LDPlayer9_es_1009_ld.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
ds.dll
memory/784-12-0x00000000069B0000-0x00000000069C0000-memory.dmp
memory/784-13-0x00000000728AE000-0x00000000728AF000-memory.dmp
memory/784-18-0x0000000073150000-0x0000000073166000-memory.dmp
memory/784-17-0x0000000009260000-0x0000000009276000-memory.dmp
memory/784-20-0x0000000009850000-0x0000000009DF4000-memory.dmp
memory/784-21-0x00000000093A0000-0x0000000009432000-memory.dmp
memory/784-22-0x00000000069C0000-0x0000000006A00000-memory.dmp
memory/784-23-0x000000000A380000-0x000000000A482000-memory.dmp
memory/784-24-0x00000000069B0000-0x00000000069C0000-memory.dmp