triumphloader | ae41b8ae516ade3e495b0c7ef8dc370d7cb3351376f06129415ee75b0b6fae08

Analysis

max time kernel
44s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
29/01/2023, 16:14

Target

ae41b8ae516ade3e495b0c7ef8dc370d7cb3351376f06129415ee75b0b6fae08.exe
Size

921KB
MD5

5d4d925ff7857ca92adafa83d2f830d2
SHA1

60f5feadebc55c64d2678f19c9604d12e2389a66
SHA256

ae41b8ae516ade3e495b0c7ef8dc370d7cb3351376f06129415ee75b0b6fae08
SHA512

c086024a799be0a6ea21988cba2dc5387a24e5fb5737a9a5824154ddab6f13e39cfd1b68813b179a6ac67d65f8d18d9a975c69cae8dccc5323b6d59a75f10ae4
SSDEEP

12288:zRW05a/N5c4SeAjKPDKXXhzfNwaW8wkEsI0mhyUQU8Uj0G0/:z800YKPDSzfAkmdbQP3/

Score

10^/10

TriumphLoader
TriumphLoader is a c++ loader based on the open source AbsentLoader.
trojan loader triumphloader

TriumphLoader payload 2 IoCs

resource	yara_rule
behavioral1/memory/844-54-0x0000000000400000-0x0000000000B33000-memory.dmp	family_triumphloader
behavioral1/memory/844-57-0x0000000000400000-0x0000000000B33000-memory.dmp	family_triumphloader

C:\Users\Admin\AppData\Local\Temp\ae41b8ae516ade3e495b0c7ef8dc370d7cb3351376f06129415ee75b0b6fae08.exe
"C:\Users\Admin\AppData\Local\Temp\ae41b8ae516ade3e495b0c7ef8dc370d7cb3351376f06129415ee75b0b6fae08.exe"
1⤵
PID:844

memory/844-54-0x0000000000400000-0x0000000000B33000-memory.dmp

Filesize
7.2MB

Download
memory/844-55-0x0000000002840000-0x0000000002F59000-memory.dmp

Filesize
7.1MB

Download
memory/844-56-0x0000000075601000-0x0000000075603000-memory.dmp

Filesize
8KB

Download
memory/844-57-0x0000000000400000-0x0000000000B33000-memory.dmp

Filesize
7.2MB

Download