Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    114s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    11/07/2026, 23:44

General

  • Target
    TriggerHeavenV5.0.2.exe
  • Size 96.9MB
  • Sample260711-3rm7padt4v
  • SHA256 8bc0735263585b79941c1d6da7a082d421d8016a91ddfc8600636a564a71705b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TriggerHeavenV5.0.2.exe
    "C:\Users\Admin\AppData\Local\Temp\TriggerHeavenV5.0.2.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5840
    • C:\Users\Admin\AppData\Local\Temp\TriggerHeavenV5.0.2.exe
      "C:\Users\Admin\AppData\Local\Temp\TriggerHeavenV5.0.2.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4280
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:4184

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          VCRUNTIME140.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\VCRUNTIME140.dll
          • Size 95KB
          • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _bz2.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\_bz2.pyd
          • Size 85KB
          • SHA256 c0dd9496b19ba9536a78a43a97704e7d4bef3c901d196ed385e771366682819d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _ctypes.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\_ctypes.pyd
          • Size 125KB
          • SHA256 a8703f949c9520b76cb1875d1176a23a2b3ef1d652d6dfac6e1de46dc08b2aa3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _lzma.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\_lzma.pyd
          • Size 160KB
          • SHA256 6e571d93ce55d09583ec91c607883a43c1da3d4d36794d68c6ecd6bea4ab466a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-console-l1-1-0.dll
          • Size 21KB
          • SHA256 2c04c30978844f2c2e1c332b7571e817a193b363a8bb1f8eb3d84de644e233b4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-datetime-l1-1-0.dll
          • Size 21KB
          • SHA256 2871a41138cc6caae22fa9419de02a88a007b05cf953e9f56838f4824b753ebb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-debug-l1-1-0.dll
          • Size 21KB
          • SHA256 a18a61e492ddbac86c66a4332b0af47a1a8544a1f03e578430b3df5849da7d56
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 21KB
          • SHA256 426bcd0c48841c615adeb741f000f019c69a69363181a8b21416f53352a5984c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-fibers-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-fibers-l1-1-0.dll
          • Size 21KB
          • SHA256 bd8a65c6643c78a2bba7bae28f5d8ee004211b55e428941221f652122f651347
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-file-l1-1-0.dll
          • Size 25KB
          • SHA256 d04657c8278928251af1418a8810bd3f7050d458b1f0ee8afe3b0e38cfc34d29
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-file-l1-2-0.dll
          • Size 21KB
          • SHA256 56c5a62d71a7e9fdd0f5dad4ce4e55308efa6d6312243a1cf0eaeaeb2be15789
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-file-l2-1-0.dll
          • Size 20KB
          • SHA256 f957a4c261506484b53534a9be8931c02ec1a349b3f431a858f8215cecfec3f7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-handle-l1-1-0.dll
          • Size 21KB
          • SHA256 da54440ed484318e5e58e981a3b065f5ec462453f65aaf6e62af39258423eaa0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-heap-l1-1-0.dll
          • Size 21KB
          • SHA256 8d733fbfb5e42d469121e10150f9b3c98f59b0bbf075d8095596e49cd1196e2d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 21KB
          • SHA256 b63e0d296b8ba70d78fadf246b831beba4e32e85678b280c9318d703d893e3d4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 21KB
          • SHA256 da8c6cbaf6ffd4d2cb55e98763dd7bf5887de6fed95e3f346fde927f05fe7a50
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-localization-l1-2-0.dll
          • Size 21KB
          • SHA256 343815c1587ca7d9c09aa31b499e15ca458478b53b740566d437d1d009ff5cd1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-memory-l1-1-0.dll
          • Size 21KB
          • SHA256 dfec9e3f90c4fab41d73913e3cf88ca95086451f11826e9c1a67c015761ed4ae
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 21KB
          • SHA256 cf515c2da4c83681cf8a5c3144cac611ae047a9ad1042ecf809d5c0a378defd0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 21KB
          • SHA256 99c27c8cc544ec648b7fa4e772bbc53b243deda14750eee6e7579be3c99d62f9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 21KB
          • SHA256 58e2dc0c10857ca1b8864c5a20844b631e51099260e80b63fdf7f9a32fa3439b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 21KB
          • SHA256 6d927715a524c931249853d7e99a758f0b4cef22ba5861e87bb6a62f463b6400
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-profile-l1-1-0.dll
          • Size 21KB
          • SHA256 a664a16087c73339b98557957144cc79386c053b69bfa2a9bc0beb3b31b1995b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 21KB
          • SHA256 4972c470d1ea9ba528c526242dfd37b27e76d2475b4af3999daf17472b861c99
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-string-l1-1-0.dll
          • Size 21KB
          • SHA256 b9e3b51a8f767de62b2f3d2b16bbf705ea13f8d4b1138e7aa075831a2824809f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-synch-l1-1-0.dll
          • Size 21KB
          • SHA256 b7a47d2cf855732dab37bb41d389d256b713a6f570124d4dbea4c32187d61b17
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-synch-l1-2-0.dll
          • Size 21KB
          • SHA256 f392eaa899342270a4d81da68e621834979eed9664d490dc663d5038112b5b63
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 21KB
          • SHA256 4aa50aa4247aa187d988c219bbc210a9a51ef71b025352033e68775af02f1ddc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-timezone-l1-1-0.dll
          • Size 21KB
          • SHA256 e722f4f3562266ab418b2d36f5e13c6ff5954f6eec28664043f56d9f765aeab0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-core-util-l1-1-0.dll
          • Size 21KB
          • SHA256 919f92a64d2cca1a461628e5e1453cd9d476e7d3716e5422ecd09d6e8e72e8de
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-conio-l1-1-0.dll
          • Size 21KB
          • SHA256 33bd317d5237ec953a43515ed001e2fdb003d4c05ae9543850e408e5223bde63
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-convert-l1-1-0.dll
          • Size 25KB
          • SHA256 c6aabd23dec3662f93c9af644b1c0c9122590fecc6d05e10cdc80a051b4cc41d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-environment-l1-1-0.dll
          • Size 21KB
          • SHA256 c26f83edd99ed6c2dc2202726b5cab945c7136d17c10b0bec7c8cfe9570cefb1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 21KB
          • SHA256 1c2bbcccc6b8dff559df9f243100f9a50712c40fa7fc73ab3719e96ab4802d45
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-heap-l1-1-0.dll
          • Size 21KB
          • SHA256 70fc53a069f8be4cc2a8f7308e69bfa41bb2538528332ba9a2306d95644cddf7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-locale-l1-1-0.dll
          • Size 21KB
          • SHA256 92037a952987026aa1d5d1c4e42fcc42101bf14b2ab14e95feb5580cb44fd858
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-math-l1-1-0.dll
          • Size 29KB
          • SHA256 a58974feb4205553e5ee301d355c7786ab7cd1a1df22511616f9605224871741
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 29KB
          • SHA256 56c3009c4b3b46db62e9dac3f02616e225f923f7a46de34ea1ae59c9d0a530a3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-private-l1-1-0.dll
          • Size 73KB
          • SHA256 289169062da6dc4ab8c764072284989cefad2eb9ee43e446b575e40ecfdd158e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-process-l1-1-0.dll
          • Size 21KB
          • SHA256 a7f63fc8313b2cbef95422abfae7bd805618bdc506e0131ebbc4ce582e1129cb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 25KB
          • SHA256 d31bea490d4cb2e9613cbfeda38363772e048c60700f800600fcab8261bb762c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 25KB
          • SHA256 47e3c088750d40cd0630382ce40bc9c95acb43f9672b1fa49a3962d688d12435
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-string-l1-1-0.dll
          • Size 25KB
          • SHA256 dadc6dd1cb4ce7b8a84560c2c67dbe316f33010435fd9d6bbde8853ee78ee5bd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-time-l1-1-0.dll
          • Size 21KB
          • SHA256 7571d8b379a8bfe8ad7d9e0d9d05311277696b76dfc75fff0dfc395e2247aa90
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\api-ms-win-crt-utility-l1-1-0.dll
          • Size 21KB
          • SHA256 a9daac7eeab214de2e1993eb65bbd7f7080c5d009cdfab1d8c13e51eaa75f924
          • MD5 SHA1 SHA512 SSDEEP TLSH

          base_library.zip

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\base_library.zip
          • Size 829KB
          • SHA256 228c8cc61ae469bc70ddde0d981c0ecafa8a3c8df9796f4e1bd4fafe2375dce1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          driver.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\driver.pyd
          • Size 163KB
          • SHA256 bbb1f56477e239cadee143d0bcb26adfb261261e2a6167f5efcabdc745c3b675
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libcrypto-1_1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\libcrypto-1_1.dll
          • Size 3.3MB
          • SHA256 9c0a0a11629cced6a064932e95a0158ee936739d75a56338702fed97cb0bad55
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libffi-7.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\libffi-7.dll
          • Size 32KB
          • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libgcc_s_seh-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\libgcc_s_seh-1.dll
          • Size 149KB
          • SHA256 6a68f99a316764b680bbb6f0553299fbc7130a3421a1d64bb044627cbe0c6db2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libssl-1_1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\libssl-1_1.dll
          • Size 682KB
          • SHA256 ed1c8769f5096afd000fc730a37b11177fcf90890345071ab7fbceac684d571f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libstdc++-6.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\libstdc++-6.dll
          • Size 2.3MB
          • SHA256 9510ec8bbec49de557da9935f793ad19f1ffdb4e5e3ef7715bd40ffe0b5f3892
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libwinpthread-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\libwinpthread-1.dll
          • Size 60KB
          • SHA256 d6dc4c052881ca7a994dda291128fee17de9c4cf1fbd936886b466740d280aab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python3.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\python3.dll
          • Size 59KB
          • SHA256 5a2f39ed041d35bb48e89c72c1ad16a5a24a3674f8eb34bfbc6310fd75128f16
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python39.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\python39.dll
          • Size 4.3MB
          • SHA256 324963a39b8fd045ff634bb3271508dab5098b4d99e85e7648d0b47c32dc85c3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI58402\ucrtbase.dll
          • Size 1.1MB
          • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          memory/4280-1362-0x0000012C31590000-0x0000012C318E0000-memory.dmp

          memory/4280-1363-0x00007FFD308A0000-0x00007FFD30AF0000-memory.dmp

          memory/4280-1360-0x0000012C54EF0000-0x0000012C54F00000-memory.dmp

          memory/4280-1358-0x00007FFD34AF0000-0x00007FFD34D1E000-memory.dmp

          memory/4280-1357-0x00007FFD37090000-0x00007FFD37303000-memory.dmp