Analysis
-
max time kernel
62s -
max time network
68s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
30-09-2023 14:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Trillium_Security_MultiSploit_Tool_v6.5.21_Release/Trillium_Security_MultiSploit_Tool_v6.5.21_Release.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
60 seconds
General
-
Target
Trillium_Security_MultiSploit_Tool_v6.5.21_Release/Trillium_Security_MultiSploit_Tool_v6.5.21_Release.exe
-
Size
28.9MB
-
MD5
6f917ac7a155e769fd98d6c6ff811c3e
-
SHA1
dd97dd6bcd22578968cca6aef5907b8d712d8d7b
-
SHA256
4dd11fce0f3fd5b1d7ead5e031b9f844b71ba96cd62b2ee2bce0f6f3636ba0e4
-
SHA512
7637c2d32dff290e9fe265a925f5f89d362c7ea55c9e5c037b9002446ebbcc95f0f2740bae163689510dc3a18d7db6058d2f9603388724304f600a6329de5387
-
SSDEEP
786432:gNMzvSIMktmlrKHg56wUYtHzzAAQbBNLllH+kf:gC7mlmHgoHWHzLQ1RlhV
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1248 Trillium_Security_MultiSploit_Tool_v6.5.21_Release.exe 1248 Trillium_Security_MultiSploit_Tool_v6.5.21_Release.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Trillium_Security_MultiSploit_Tool_v6.5.21_Release\Trillium_Security_MultiSploit_Tool_v6.5.21_Release.exe"C:\Users\Admin\AppData\Local\Temp\Trillium_Security_MultiSploit_Tool_v6.5.21_Release\Trillium_Security_MultiSploit_Tool_v6.5.21_Release.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:1248