Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
15/03/2024, 08:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TrinityLoader.exe
Resource
win7-20240221-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
TrinityLoader.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
TrinityLoader.exe
-
Size
140.0MB
-
MD5
cc8a9290d4d7f1d36055993ef2c927a4
-
SHA1
91549c9d8637b2034157244cb32811e41801777e
-
SHA256
fe4eab5e0fc4d22b5b74399fe790851a488b8ef32d8b5a850b73aeb298f7d0df
-
SHA512
3e6bca457b2bab14e60f0d0b5b32d9e7da47eee2ac8d99bc3145d94b6af8bf1ca80ebe4cf1182ba3e04c48ecfb5d8f4f86cfaba861092746cab6df6a630ad259
-
SSDEEP
786432:e5FEf2qL+07t0WN3KPqiVUTyqj1+NnRUTEKsKgqTtLwSTRpf4P1wT1ixZrstS:eIfjLJ2TVUXKStTAxZrstS
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 932 TrinityLoader.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 932 TrinityLoader.exe