Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

30/06/2024, 09:54

240630-lxh2gswcle 3

30/06/2024, 09:51

240630-lvrkvawckh 3

Analysis

  • max time kernel
    96s
  • max time network
    99s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    30/06/2024, 09:51

General

  • Target

    DAIToolsSuite_Loader.exe

  • Size

    37KB

  • MD5

    4597d9020c4ffce1002bcc7ad9e8aef9

  • SHA1

    df7b571999b28594425f9c4224fe7d97f1225e46

  • SHA256

    9883a0f5fba1d0a249507c210f0a13c6b65ade473bddd09cfe9a091e90223bc4

  • SHA512

    f8084326d09561f93cd5cdd9f7b38b0ccfabd82abcd80d26be2948e9b04e184fddb9b126355e1c9bdbdbd378f2f2d4398b47715acdb113aa78dafadc710ae153

  • SSDEEP

    384:sKFV2uzG8L0LYFAiPk9yL584aN9XE3xYvsnQna3inPlvKCCmYQxP6cChMcUSo8SV:r79zG8JFAX4aYxYvUx3inPTJhChTJa3

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DAIToolsSuite_Loader.exe
    "C:\Users\Admin\AppData\Local\Temp\DAIToolsSuite_Loader.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2788
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:2764

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\DAIToolsSuite_Loader\DAIToolsSuite_Loader.exe_Url_elymvqkjzsb5fmnjhr1ul1bnq5mfsx2h\1.0.0.8\user.config

      Filesize

      1KB

      MD5

      b4429ab466d7b227be7359cfb10a2f6e

      SHA1

      cc7f9f6e66482a10fe43d100635cf5cbe95a8805

      SHA256

      b4cfa6a0ecd2fe9802613e3126c38fccbe5dd769947c06ab921b0810ea2a73e7

      SHA512

      ddbfd8354eedcdd7d53f14277742fae437f79adcb6ad395326f49501740be27320b4001cdd7f64dc5aec5dc096dc1d4e8f4d453fc3853affa0c03d82be984c1a

    • C:\Users\Admin\AppData\Local\DAIToolsSuite_Loader\DAIToolsSuite_Loader.exe_Url_elymvqkjzsb5fmnjhr1ul1bnq5mfsx2h\1.0.0.8\user.config

      Filesize

      839B

      MD5

      e706e03acfefcdb8df19a721d2ca9ff6

      SHA1

      d0e8da6ad38ae96799b010397513cbbaece44dc5

      SHA256

      71200e8c52cf7013ecac4370477d4735d7b8168f5532f567068189be9c8a55a2

      SHA512

      2a615c42df2d40b52ea6e044d87cbacdc216939a1773135d9fa7f51b06bc58ac2cb9bd51592991fd1f7bed950a4bbae72da02bf9b9678dba7e6f054d1587b4e9

    • memory/2788-0-0x0000000074B2E000-0x0000000074B2F000-memory.dmp

      Filesize

      4KB

    • memory/2788-1-0x0000000000AA0000-0x0000000000AB0000-memory.dmp

      Filesize

      64KB

    • memory/2788-2-0x0000000074B20000-0x000000007520E000-memory.dmp

      Filesize

      6.9MB

    • memory/2788-17-0x0000000074B20000-0x000000007520E000-memory.dmp

      Filesize

      6.9MB

    • memory/2788-30-0x0000000074B20000-0x000000007520E000-memory.dmp

      Filesize

      6.9MB