Analysis
-
max time kernel
46s -
max time network
51s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
29/01/2023, 16:41
Static task
static1
Behavioral task
behavioral1
Sample
cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3.exe
Resource
win10v2004-20220812-en
General
-
Target
cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3.exe
-
Size
1.0MB
-
MD5
9bd15f32f41faad427d75292516aab16
-
SHA1
5d06e38f80ffea74a4f90988df62b1404be63736
-
SHA256
cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3
-
SHA512
8d44d609556e41137f1b4f16384c47b8694fdd8aefd73e8d9468c85c013bcdf1ce1bef600cdf1122afb74abce5e2306e2a0edade5cdd013bc526641618472ae7
-
SSDEEP
12288:B8wkEsI0mhyUQU8Uj0Gb05a/N5c4SeAjKPDKXXhzfNwa:PkmdbQPu00YKPDSzf
Malware Config
Signatures
-
TriumphLoader
TriumphLoader is a c++ loader based on the open source AbsentLoader.
-
TriumphLoader payload 2 IoCs
resource yara_rule behavioral1/memory/852-54-0x0000000000400000-0x0000000000508000-memory.dmp family_triumphloader behavioral1/memory/852-57-0x0000000000400000-0x0000000000508000-memory.dmp family_triumphloader