Overview

overview

10

Static

static

1e3d43db0f...1e.exe

windows7-x64

10

1e3d43db0f...1e.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    340s
  • max time network
    407s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/11/2022, 13:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e.exe

  • Size

    485KB

  • MD5

    8f85ebeafa44681fc4b8e10342722499

  • SHA1

    fbdb1a95913a752cbe80313cc80d4363b9bfc981

  • SHA256

    1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e

  • SHA512

    3959fb203d6c2bf6f445c026d36f7e7848271a84b8e9132a1e58d8b24c9903617dd2e34677e5422d75702faef1d6e0e775f8745202d3b4dd288fb319beae1900

  • SSDEEP

    6144:GCrmIi+E4cu3O6Jgb2Wf3urb7+ubYihDwUWxid9ZKWw8Um5uukm8nz1lxWdF:7mIiR5u+6ebl3A+ubYK0Uy2ZKJnzRW

Score
10/10
triumphloaderloadertrojan

Malware Config

Signatures

  • TriumphLoader

    TriumphLoader is a c++ loader based on the open source AbsentLoader.

    trojanloadertriumphloader
  • TriumphLoader payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e.exe
    "C:\Users\Admin\AppData\Local\Temp\1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e.exe"
    1⤵
      PID:3392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3392-132-0x0000000002C13000-0x0000000002C50000-memory.dmp

      Filesize

      244KB

      Download

    • memory/3392-133-0x0000000002D00000-0x0000000002D7F000-memory.dmp

      Filesize

      508KB

      Download