Resubmissions

30-06-2024 09:54

240630-lxh2gswcle 3

30-06-2024 09:51

240630-lvrkvawckh 3

Analysis

  • max time kernel
    32s
  • max time network
    33s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-06-2024 09:54

General

  • Target

    DAIToolsSuite_Loader.exe

  • Size

    37KB

  • MD5

    4597d9020c4ffce1002bcc7ad9e8aef9

  • SHA1

    df7b571999b28594425f9c4224fe7d97f1225e46

  • SHA256

    9883a0f5fba1d0a249507c210f0a13c6b65ade473bddd09cfe9a091e90223bc4

  • SHA512

    f8084326d09561f93cd5cdd9f7b38b0ccfabd82abcd80d26be2948e9b04e184fddb9b126355e1c9bdbdbd378f2f2d4398b47715acdb113aa78dafadc710ae153

  • SSDEEP

    384:sKFV2uzG8L0LYFAiPk9yL584aN9XE3xYvsnQna3inPlvKCCmYQxP6cChMcUSo8SV:r79zG8JFAX4aYxYvUx3inPTJhChTJa3

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DAIToolsSuite_Loader.exe
    "C:\Users\Admin\AppData\Local\Temp\DAIToolsSuite_Loader.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\DAIToolsSuite_Loader\DAIToolsSuite_Loader.exe_Url_elymvqkjzsb5fmnjhr1ul1bnq5mfsx2h\1.0.0.8\user.config

    Filesize

    839B

    MD5

    e706e03acfefcdb8df19a721d2ca9ff6

    SHA1

    d0e8da6ad38ae96799b010397513cbbaece44dc5

    SHA256

    71200e8c52cf7013ecac4370477d4735d7b8168f5532f567068189be9c8a55a2

    SHA512

    2a615c42df2d40b52ea6e044d87cbacdc216939a1773135d9fa7f51b06bc58ac2cb9bd51592991fd1f7bed950a4bbae72da02bf9b9678dba7e6f054d1587b4e9

  • C:\Users\Admin\AppData\Local\DAIToolsSuite_Loader\DAIToolsSuite_Loader.exe_Url_elymvqkjzsb5fmnjhr1ul1bnq5mfsx2h\1.0.0.8\user.config

    Filesize

    1KB

    MD5

    b4429ab466d7b227be7359cfb10a2f6e

    SHA1

    cc7f9f6e66482a10fe43d100635cf5cbe95a8805

    SHA256

    b4cfa6a0ecd2fe9802613e3126c38fccbe5dd769947c06ab921b0810ea2a73e7

    SHA512

    ddbfd8354eedcdd7d53f14277742fae437f79adcb6ad395326f49501740be27320b4001cdd7f64dc5aec5dc096dc1d4e8f4d453fc3853affa0c03d82be984c1a

  • memory/2996-0-0x000000007495E000-0x000000007495F000-memory.dmp

    Filesize

    4KB

  • memory/2996-1-0x0000000000830000-0x0000000000840000-memory.dmp

    Filesize

    64KB

  • memory/2996-2-0x0000000005810000-0x0000000005DB4000-memory.dmp

    Filesize

    5.6MB

  • memory/2996-3-0x0000000005260000-0x00000000052F2000-memory.dmp

    Filesize

    584KB

  • memory/2996-5-0x0000000074950000-0x0000000075100000-memory.dmp

    Filesize

    7.7MB

  • memory/2996-4-0x00000000051F0000-0x00000000051FA000-memory.dmp

    Filesize

    40KB

  • memory/2996-8-0x0000000074950000-0x0000000075100000-memory.dmp

    Filesize

    7.7MB

  • memory/2996-32-0x0000000074950000-0x0000000075100000-memory.dmp

    Filesize

    7.7MB