Analysis
- max time kernel
898s - max time network
465s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/05/2026, 16:26
Static task
static1
Behavioral task
behavioral1
Sample
LDPlayer9_ens_1001_ld.exe
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
LDPlayer9_ens_1001_ld.exe
Resource
win11-20260513-en
3 signatures
900 seconds
General
- Target LDPlayer9_ens_1001_ld.exe
- Size 3.4MB
- Sample260516-txvdhsay3n
- SHA256 18137cc3633f53ea17de77742252f6b5441a8eb17708d472aa921d4e9a40bd69
- MD5 0ec6ee342849c3f8e2264b6980dbd784
- SHA1 61cffc59f791b90fad52eb254657f71dd8424a74
- SHA512 f2410ca21bc93a403af6131e6cb01f382608543b862d9c872f5e261c2c9852a4a1c3d719d38d08baa0efa554454cdccb1f304ff147001d2004e93b99110b5670
- SSDEEP 49152:/8KJmfhdpE6Lq6bsJ+bqBpQ+C54iiNBK9crlL8fclWnUJLTxbC8amDethSSwx0cw:/dJmfhdpE6LqZsbeCyr18f40ObFq8Sc
- TLSH T177F5BF12BA818176F5E30171D8BE5BBE4939AD31072494C3D3C4396E5A61AE23B3B74F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: LDPlayer9_ens_1001_ld.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language LDPlayer9_ens_1001_ld.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 484 LDPlayer9_ens_1001_ld.exe 484 LDPlayer9_ens_1001_ld.exe