General
-
Target
LDPlayer9_es_1009_ld.exe
-
Size
3.4MB
-
Sample
241008-r1lvfaveka
-
MD5
d3f42950472326bca3051521650155bd
-
SHA1
97f81696dd2b9f0289c6a6002017007ab2a7b463
-
SHA256
f85ba2e1604219d15c2b7816312f0c530411416cf3789fcc0ab73d7ee6dce36a
-
SHA512
45d9e6d7bfaf0f234034b0c78c8e0301e95f3b0d05f189ca29080100a8fadca78ca3a784183a1116a6655cca839f8890f702c2d5b2090e028503ff2a67ec44e3
-
SSDEEP
49152:T1Be0WwNjL2UmeJJY1pHtOUYqP3CFOrtG/tTR9sXafgkDFMVR9C1UhPJXMK701hX:Tze0/jL2Umec1t0xOoVMBiCV2HkK
Static task
static1
Behavioral task
behavioral1
Sample
LDPlayer9_es_1009_ld.exe
Resource
win10-20240611-en
Malware Config
Targets
-
-
Target
LDPlayer9_es_1009_ld.exe
-
Size
3.4MB
-
MD5
d3f42950472326bca3051521650155bd
-
SHA1
97f81696dd2b9f0289c6a6002017007ab2a7b463
-
SHA256
f85ba2e1604219d15c2b7816312f0c530411416cf3789fcc0ab73d7ee6dce36a
-
SHA512
45d9e6d7bfaf0f234034b0c78c8e0301e95f3b0d05f189ca29080100a8fadca78ca3a784183a1116a6655cca839f8890f702c2d5b2090e028503ff2a67ec44e3
-
SSDEEP
49152:T1Be0WwNjL2UmeJJY1pHtOUYqP3CFOrtG/tTR9sXafgkDFMVR9C1UhPJXMK701hX:Tze0/jL2Umec1t0xOoVMBiCV2HkK
-
Creates new service(s)
-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
-
Possible privilege escalation attempt
-
Modifies file permissions
-
Downloads MZ/PE file
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
File and Directory Permissions Modification
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1