triumphloader | fe0f17aefe66829e9b1ec1d524b7946c1cc56b3f34b26e7591b36907d89601e1

Analysis

max time kernel
12s
max time network
35s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
29/01/2023, 16:13

Target

fe0f17aefe66829e9b1ec1d524b7946c1cc56b3f34b26e7591b36907d89601e1.exe
Size

485KB
MD5

5146a6bc71523d8d55a72b3c4a6d3775
SHA1

9d5dfa47ef983b71bc1ce4df4bb1b14227c8bf9b
SHA256

fe0f17aefe66829e9b1ec1d524b7946c1cc56b3f34b26e7591b36907d89601e1
SHA512

09c5d89e5161180e59bb9262cffcdfa7f5cd1ad7c24f53d3a3aa0de01205a4b501bb00e708288d8821e3ddb3bb3c881d453dbeb40c5e39ac1d84f762e2cede7a
SSDEEP

12288:R58Ho4fOnN+Kt0iIBuDIzZe7C4lJvjTfuWa:R6FM+KDDIzY7Pu

Score

10^/10

TriumphLoader
TriumphLoader is a c++ loader based on the open source AbsentLoader.
trojan loader triumphloader

TriumphLoader payload 3 IoCs

resource	yara_rule
behavioral1/memory/1460-55-0x0000000000220000-0x000000000029F000-memory.dmp	family_triumphloader
behavioral1/memory/1460-56-0x0000000000400000-0x0000000002BF0000-memory.dmp	family_triumphloader
behavioral1/memory/1460-59-0x0000000000400000-0x0000000002BF0000-memory.dmp	family_triumphloader

C:\Users\Admin\AppData\Local\Temp\fe0f17aefe66829e9b1ec1d524b7946c1cc56b3f34b26e7591b36907d89601e1.exe
"C:\Users\Admin\AppData\Local\Temp\fe0f17aefe66829e9b1ec1d524b7946c1cc56b3f34b26e7591b36907d89601e1.exe"
1⤵
PID:1460

memory/1460-54-0x0000000002DD9000-0x0000000002E15000-memory.dmp

Filesize
240KB

Download
memory/1460-55-0x0000000000220000-0x000000000029F000-memory.dmp

Filesize
508KB

Download
memory/1460-56-0x0000000000400000-0x0000000002BF0000-memory.dmp

Filesize
39.9MB

Download
memory/1460-57-0x0000000075D01000-0x0000000075D03000-memory.dmp

Filesize
8KB

Download
memory/1460-58-0x0000000002DD9000-0x0000000002E15000-memory.dmp

Filesize
240KB

Download
memory/1460-59-0x0000000000400000-0x0000000002BF0000-memory.dmp

Filesize
39.9MB

Download