General

  • Target
    triggerbot_v1.7.1.zip
  • Size 22.7MB
  • Sample260905-s2barsxerg
  • SHA256 81c0b76ec654789d8861318bb8fd3e5b48ec8bfc3f4e1271d7650b393252ae9d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • triggerbot_v1.7.1.zip
    .zip 22.7MB
  • config.txt
    240B
  • logi/devcon.exe
    .exe 118KB
  • logi/hw_logi_joy_bus_enum.inf
    2KB
  • logi/hw_logi_joy_vir_hid.inf
    2KB
  • logi/logi_joy_bus_enum.cat
    13KB
  • logi/logi_joy_bus_enum.sys
    .sys 36KB
  • logi/logi_joy_vir_hid.cat
    13KB
  • logi/logi_joy_vir_hid.sys
    .sys 25KB
  • logi/logi_joy_xlcore.sys
    .sys 65KB
  • logi/manifest.json
    500B
  • main.exe
    .exe 101KB
  • opencv_world4120.dll
    .dll 61.2MB
  • python312.dll
    .dll 209KB
  • vcruntime140.dll
    .dll 117KB
  • vcruntime140_1.dll
    .dll 48KB

triggerbot_v1.7.1.zip

  • SHA256 81c0b76ec654789d8861318bb8fd3e5b48ec8bfc3f4e1271d7650b393252ae9d
  • MD5 SHA1 SHA512 SSDEEP TLSH