Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
17/01/2025, 16:15
General
-
Target
LDPlayer9_ens_com.ewt.purble_25567197_ld.exe
-
Size
2.1MB
-
MD5
b38032c2aacdbf4591f3b2232aa2095b
-
SHA1
6d0693e138848613bb951a8d7ac0965f3e0d7801
-
SHA256
486ffcca0673fceb2741b0048d8a409ece396c552b6bca6008f342ac8c94be11
-
SHA512
e3b3681653ca8b9f8c18068cd1965e70b926581636453a963907ee80b16f942519832467a8be6653718ef057f6a792b808b6cc8b1dff28be402d673cb5380b2e
-
SSDEEP
24576:tFwpqSq7cwxsmDRpnt3O3a0iD3MzvD/RXNgZ2Ppm+x9nGWTysehNBN88LcpmZQ46:2wntJ3MQ2PQ+3Gnb88amDeqhSSwr+I5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.ewt.purble_25567197_ld.exe"C:\Users\Admin\AppData\Local\Temp\LDPlayer9_ens_com.ewt.purble_25567197_ld.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses