Overview

overview

8

Static

static

3

TrinityLoader.exe

windows7-x64

TrinityLoader.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TrinityLoader.exe

  • Size

    140.0MB

  • Sample

    240315-khh79seb63

  • MD5

    cc8a9290d4d7f1d36055993ef2c927a4

  • SHA1

    91549c9d8637b2034157244cb32811e41801777e

  • SHA256

    fe4eab5e0fc4d22b5b74399fe790851a488b8ef32d8b5a850b73aeb298f7d0df

  • SHA512

    3e6bca457b2bab14e60f0d0b5b32d9e7da47eee2ac8d99bc3145d94b6af8bf1ca80ebe4cf1182ba3e04c48ecfb5d8f4f86cfaba861092746cab6df6a630ad259

  • SSDEEP

    786432:e5FEf2qL+07t0WN3KPqiVUTyqj1+NnRUTEKsKgqTtLwSTRpf4P1wT1ixZrstS:eIfjLJ2TVUXKStTAxZrstS

Score
8/10
evasionpersistencepyinstaller

Malware Config

Targets

    • Target

      TrinityLoader.exe

    • Size

      140.0MB

    • MD5

      cc8a9290d4d7f1d36055993ef2c927a4

    • SHA1

      91549c9d8637b2034157244cb32811e41801777e

    • SHA256

      fe4eab5e0fc4d22b5b74399fe790851a488b8ef32d8b5a850b73aeb298f7d0df

    • SHA512

      3e6bca457b2bab14e60f0d0b5b32d9e7da47eee2ac8d99bc3145d94b6af8bf1ca80ebe4cf1182ba3e04c48ecfb5d8f4f86cfaba861092746cab6df6a630ad259

    • SSDEEP

      786432:e5FEf2qL+07t0WN3KPqiVUTyqj1+NnRUTEKsKgqTtLwSTRpf4P1wT1ixZrstS:eIfjLJ2TVUXKStTAxZrstS

    Score
    8/10
    evasionpersistencepyinstaller

    • Creates new service(s)

      persistence

    • Downloads MZ/PE file

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks