triumphloader | 1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
30/11/2022, 13:13

Target

1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e.exe
Size

485KB
MD5

8f85ebeafa44681fc4b8e10342722499
SHA1

fbdb1a95913a752cbe80313cc80d4363b9bfc981
SHA256

1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e
SHA512

3959fb203d6c2bf6f445c026d36f7e7848271a84b8e9132a1e58d8b24c9903617dd2e34677e5422d75702faef1d6e0e775f8745202d3b4dd288fb319beae1900
SSDEEP

6144:GCrmIi+E4cu3O6Jgb2Wf3urb7+ubYihDwUWxid9ZKWw8Um5uukm8nz1lxWdF:7mIiR5u+6ebl3A+ubYK0Uy2ZKJnzRW

Score

10^/10

TriumphLoader
TriumphLoader is a c++ loader based on the open source AbsentLoader.
trojan loader triumphloader

TriumphLoader payload 3 IoCs

resource	yara_rule
behavioral1/memory/1104-55-0x0000000000220000-0x000000000029F000-memory.dmp	family_triumphloader
behavioral1/memory/1104-56-0x0000000000400000-0x0000000002BF0000-memory.dmp	family_triumphloader
behavioral1/memory/1104-59-0x0000000000400000-0x0000000002BF0000-memory.dmp	family_triumphloader

C:\Users\Admin\AppData\Local\Temp\1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e.exe
"C:\Users\Admin\AppData\Local\Temp\1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e.exe"
1⤵
PID:1104

memory/1104-54-0x0000000002D19000-0x0000000002D55000-memory.dmp

Filesize
240KB

Download
memory/1104-55-0x0000000000220000-0x000000000029F000-memory.dmp

Filesize
508KB

Download
memory/1104-56-0x0000000000400000-0x0000000002BF0000-memory.dmp

Filesize
39.9MB

Download
memory/1104-57-0x0000000075BB1000-0x0000000075BB3000-memory.dmp

Filesize
8KB

Download
memory/1104-58-0x0000000002D19000-0x0000000002D55000-memory.dmp

Filesize
240KB

Download
memory/1104-59-0x0000000000400000-0x0000000002BF0000-memory.dmp

Filesize
39.9MB

Download