Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    156s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 18:07

General

  • Target
    Davetrap-4.0.1-win-x64/Davetrap.exe
  • Size 96.5MB
  • Sample260804-wqa3eawhjd
  • SHA256 80e0db32bbcaefebcc9a7d51aa0fd659c53758a2bcedb2e63f714d6273395c30
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Modifies registry class 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Davetrap-4.0.1-win-x64\Davetrap.exe
    "C:\Users\Admin\AppData\Local\Temp\Davetrap-4.0.1-win-x64\Davetrap.exe"
    1⤵
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4540

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\Davetrap\ndjAXUZpzIyA\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 320565434e5d8a77e13980e9c0e641daa08d12693ac0d77df9ccf2b25d9e526c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\Davetrap\ndjAXUZpzIyA\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 0002f81ee5c803cb90329f2ab08556fd6de29d1ddd6d83446d1d4c19748f25e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wpfgfx_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\Davetrap\ndjAXUZpzIyA\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 905625129daab0f6dee6c6d2e95beb47f24590b8d9022392fa4440e9d2957402
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4540-5-0x000001F093EF0000-0x000001F094E40000-memory.dmp

        memory/4540-13-0x000001F092D80000-0x000001F092FA0000-memory.dmp

        memory/4540-9-0x000001F097980000-0x000001F0988A0000-memory.dmp

        memory/4540-37-0x000001F096600000-0x000001F096620000-memory.dmp

        memory/4540-33-0x000001F0994A0000-0x000001F099C90000-memory.dmp

        memory/4540-29-0x000001F0988F0000-0x000001F098940000-memory.dmp

        memory/4540-49-0x000001F098960000-0x000001F098980000-memory.dmp

        memory/4540-65-0x000001F098BA0000-0x000001F098BD0000-memory.dmp

        memory/4540-61-0x000001F098B10000-0x000001F098B30000-memory.dmp

        memory/4540-80-0x000001F09C0F0000-0x000001F09C140000-memory.dmp

        memory/4540-88-0x000001F09C170000-0x000001F09C1A0000-memory.dmp

        memory/4540-92-0x000001F09C1A0000-0x000001F09C1C0000-memory.dmp

        memory/4540-96-0x000001F09C320000-0x000001F09C3E0000-memory.dmp

        memory/4540-124-0x000001F09D8F0000-0x000001F09D900000-memory.dmp

        memory/4540-120-0x000001F09D7B0000-0x000001F09D7F0000-memory.dmp

        memory/4540-116-0x000001F09D850000-0x000001F09D8B0000-memory.dmp

        memory/4540-112-0x000001F09C3E0000-0x000001F09C400000-memory.dmp

        memory/4540-108-0x000001F09C450000-0x000001F09C490000-memory.dmp

        memory/4540-104-0x000001F098C90000-0x000001F098CA0000-memory.dmp

        memory/4540-100-0x000001F09C210000-0x000001F09C230000-memory.dmp

        memory/4540-84-0x000001F09CC10000-0x000001F09D380000-memory.dmp

        memory/4540-77-0x000001F09BFF0000-0x000001F09C0F0000-memory.dmp

        memory/4540-57-0x000001F098AD0000-0x000001F098AF0000-memory.dmp

        memory/4540-53-0x000001F098AB0000-0x000001F098AD0000-memory.dmp

        memory/4540-69-0x000001F098BD0000-0x000001F098BF0000-memory.dmp

        memory/4540-45-0x000001F0965C0000-0x000001F0965D0000-memory.dmp

        memory/4540-41-0x000001F098A10000-0x000001F098A90000-memory.dmp

        memory/4540-25-0x000001F0969E0000-0x000001F096A20000-memory.dmp

        memory/4540-21-0x000001F096950000-0x000001F0969A0000-memory.dmp

        memory/4540-17-0x000001F0967F0000-0x000001F096950000-memory.dmp

        memory/4540-128-0x000001F09E8C0000-0x000001F09E970000-memory.dmp

        memory/4540-132-0x000001F09E9E0000-0x000001F09EA50000-memory.dmp

        memory/4540-136-0x000001F09EC40000-0x000001F09EDA0000-memory.dmp

        memory/4540-140-0x000001F09EEA0000-0x000001F09EFA0000-memory.dmp

        memory/4540-144-0x000001F09F220000-0x000001F09F3D0000-memory.dmp

        memory/4540-148-0x000001F09EA60000-0x000001F09EAE0000-memory.dmp

        memory/4540-156-0x000001F09F900000-0x000001F09FB70000-memory.dmp

        memory/4540-164-0x000001F0A1D90000-0x000001F0A2110000-memory.dmp

        memory/4540-152-0x000001F09F4E0000-0x000001F09F580000-memory.dmp

        memory/4540-168-0x000001F0A22F0000-0x000001F0A24C0000-memory.dmp

        memory/4540-178-0x000001F09F040000-0x000001F09F060000-memory.dmp

        memory/4540-182-0x000001F0A0280000-0x000001F0A02D0000-memory.dmp

        memory/4540-160-0x000001F0A1070000-0x000001F0A1D90000-memory.dmp

        memory/4540-187-0x000001F0A25B0000-0x000001F0A2690000-memory.dmp

        memory/4540-174-0x000001F09F5F0000-0x000001F09F660000-memory.dmp

        memory/4540-199-0x000001F09F400000-0x000001F09F410000-memory.dmp

        memory/4540-195-0x000001F09F060000-0x000001F09F070000-memory.dmp

        memory/4540-203-0x000001F099E90000-0x000001F09A12E000-memory.dmp

        memory/4540-207-0x000001F0A6760000-0x000001F0A6780000-memory.dmp

        memory/4540-218-0x000001F0A67B0000-0x000001F0A67C0000-memory.dmp

        memory/4540-230-0x000001F0A8B70000-0x000001F0A8B90000-memory.dmp

        memory/4540-224-0x000001F0A9110000-0x000001F0A9230000-memory.dmp

        memory/4540-238-0x000001F0A9480000-0x000001F0A94B0000-memory.dmp

        memory/4540-226-0x000001F0A9320000-0x000001F0A9410000-memory.dmp

        memory/4540-234-0x000001F0A8C10000-0x000001F0A8C30000-memory.dmp

        memory/4540-214-0x000001F0A8E20000-0x000001F0A8FF0000-memory.dmp

        memory/4540-242-0x000001F0A8B20000-0x000001F0A8B30000-memory.dmp

        memory/4540-254-0x000001F0A94B0000-0x000001F0A9530000-memory.dmp

        memory/4540-258-0x000001F0A6680000-0x000001F0A66A0000-memory.dmp

        memory/4540-262-0x000001F0A8770000-0x000001F0A87A0000-memory.dmp

        memory/4540-266-0x000001F099E90000-0x000001F09A12E000-memory.dmp