Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
20/04/2022, 13:51
Static task
static1
Behavioral task
behavioral1
Sample
d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe
-
Size
414KB
-
MD5
9c212da781d631789af40e3b5a72d26b
-
SHA1
e157431a391504f6eb6050af1c576b218884bf3b
-
SHA256
d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095
-
SHA512
1d1e3cc3adb3df32185ecd61a6c52ef6d66e52f1b37eab0cc0b6c7e61b726144773ead33f16a12f26966803f0b739b6992e7b62e5c01fedb651b094a9acd7c8c
Score
10/10
Malware Config
Signatures
-
TriumphLoader
TriumphLoader is a c++ loader based on the open source AbsentLoader.
-
TriumphLoader Payload 2 IoCs
resource yara_rule behavioral2/memory/4912-132-0x0000000002400000-0x0000000002467000-memory.dmp family_triumphloader behavioral2/memory/4912-133-0x0000000000400000-0x0000000002325000-memory.dmp family_triumphloader -
Suspicious behavior: EnumeratesProcesses 48 IoCs
pid Process 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe 4912 d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095.exe