Analysis

  • max time kernel
    46s
  • max time network
    51s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2023, 16:41

General

  • Target

    cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3.exe

  • Size

    1.0MB

  • MD5

    9bd15f32f41faad427d75292516aab16

  • SHA1

    5d06e38f80ffea74a4f90988df62b1404be63736

  • SHA256

    cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3

  • SHA512

    8d44d609556e41137f1b4f16384c47b8694fdd8aefd73e8d9468c85c013bcdf1ce1bef600cdf1122afb74abce5e2306e2a0edade5cdd013bc526641618472ae7

  • SSDEEP

    12288:B8wkEsI0mhyUQU8Uj0Gb05a/N5c4SeAjKPDKXXhzfNwa:PkmdbQPu00YKPDSzf

Malware Config

Signatures

  • TriumphLoader

    TriumphLoader is a c++ loader based on the open source AbsentLoader.

  • TriumphLoader payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3.exe
    "C:\Users\Admin\AppData\Local\Temp\cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3.exe"
    1⤵
      PID:852

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/852-54-0x0000000000400000-0x0000000000508000-memory.dmp

      Filesize

      1.0MB

    • memory/852-55-0x0000000000510000-0x0000000000604000-memory.dmp

      Filesize

      976KB

    • memory/852-56-0x0000000074DA1000-0x0000000074DA3000-memory.dmp

      Filesize

      8KB

    • memory/852-57-0x0000000000400000-0x0000000000508000-memory.dmp

      Filesize

      1.0MB