Static task
static1
Behavioral task
behavioral1
Sample
trillian-v3[1].1_US.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
trillian-v3[1].1_US.exe
Resource
win10v2004-20221111-en
General
-
Target
trillian-v3[1].1_US.exe
-
Size
8.6MB
-
MD5
656bc239791dbd857c2df8e3a91254ca
-
SHA1
fa85c3f83e782cac613de8124ead45500f5fbbe9
-
SHA256
711f0d56e98fd5c0a2105948f8b8fd276e857bd2ddae36a14d573029043f9083
-
SHA512
96fd2278502f23d67093d8220bedb85fc146423d9f3681d8fc81fb704fcef944d3e89abfa6c2d958da1313f8eb1a04fda4660ea7ef4d35fedaefc96e9cc921a4
-
SSDEEP
196608:KR5LCtfInow1v6j/BZ/RnhhhsWFgKfQkMHd1wSuffPhDcS4mJd:KLQIRh6tHhsWF3yHgBz
Malware Config
Signatures
Files
-
trillian-v3[1].1_US.exe.exe windows x86
fe1f63903f27ce61864566985f0e52d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
comctl32
ord17
kernel32
CreateProcessA
RemoveDirectoryA
FindClose
GetVersionExW
FindFirstFileA
FindFirstFileW
MoveFileA
MoveFileW
DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
GetModuleFileNameA
GetModuleFileNameW
GetTempPathA
GetTempPathW
WritePrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileIntA
GetPrivateProfileIntW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
LoadLibraryA
LoadLibraryW
FreeLibrary
ReleaseMutex
CreateMutexA
GetCurrentProcessId
CompareStringA
GetTickCount
QueryPerformanceCounter
GetOEMCP
GetACP
WaitForSingleObject
GetStringTypeW
GetStringTypeA
GetCPInfo
GetLocaleInfoA
InterlockedExchange
HeapSize
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualQuery
GetSystemInfo
VirtualProtect
SetFilePointer
RtlUnwind
UnhandledExceptionFilter
FlushFileBuffers
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
GetExitCodeProcess
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
WideCharToMultiByte
CreateFileA
SetFileTime
CloseHandle
GetLastError
FormatMessageA
LocalFree
GetVersionExA
MoveFileExA
Sleep
GetWindowsDirectoryA
TlsAlloc
LCMapStringW
LCMapStringA
GetTimeZoneInformation
ReadFile
WriteFile
GetShortPathNameA
WritePrivateProfileStringA
CompareStringW
CreateFileW
SetEndOfFile
DeleteCriticalSection
GetCommandLineA
GetStartupInfoA
GetFullPathNameW
GetFullPathNameA
SetEnvironmentVariableW
GetCurrentDirectoryA
SetEnvironmentVariableA
GetDriveTypeA
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
ExitProcess
user32
UpdateWindow
wsprintfA
InvalidateRect
SendMessageA
DefWindowProcA
EndPaint
GetClientRect
BeginPaint
LoadBitmapA
CreateWindowExA
RegisterClassA
GetWindowTextA
GetWindowTextW
SetWindowTextA
SetWindowTextW
DialogBoxParamW
MessageBoxW
FindWindowA
DialogBoxParamA
MapDialogRect
GetWindowRect
EnableWindow
PostMessageA
ShowWindow
SetFocus
MessageBoxA
ScreenToClient
EndDialog
GetSystemMetrics
SetWindowPos
GetDlgItem
LoadIconA
LoadCursorA
gdi32
TextOutW
TextOutA
DeleteObject
CreatePen
SelectObject
Rectangle
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateFontA
SetBkMode
SetTextColor
CreateSolidBrush
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteW
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
VariantClear
Sections
.text Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ