trident_loader[.]exe

Resubmissions

30/09/2026, 11:57

260930-n4ry3ss1bx5

30/09/2026, 11:56

260930-n4d28aszhv5

30/09/2026, 11:55

260930-n3xsyasw4j5

Sharing

Copy URL Twitter E-mail

General

Target
trident_loader.exe
Size 2.2MB
Sample260930-n4ry3ss1bx
SHA256 8cf753eae70357d3cc18a5d64bdea5102b4cfe3b980cdda86cfb41abaf2b5ed0
MD5 148fa917835b6f77ed5e695856025e9b
SHA1 b5b0810405c0b22b8e5cb8f5857ebfdb0aaa114c
SHA512 472a703eeea8958a7bbb20f43c47a30ab2203f4be401da7bd707472e1cc827041a697983ba6802243b6c44e29dea7d471b8e7061705645f5509699d635f65599
SSDEEP 49152:I1BLCPEXpFrXbX6cdzE8sbvnJEIkV766SLN:IDyEXp8qzvYPJgSLN
TLSH
T1E2A52381F7220FF9D172A9F4C45BE2A8E7CC127E6DD01992371C9B09AEC722746CE591
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
trident_loader.exe

File Explorer

trident_loader.exe

.exe 2.2MB

trident_loader.exe

IMPHASH 7ec47b3466d2dd99efba99c664510dfd
SHA256 8cf753eae70357d3cc18a5d64bdea5102b4cfe3b980cdda86cfb41abaf2b5ed0
MD5 148fa917835b6f77ed5e695856025e9b
SHA1 b5b0810405c0b22b8e5cb8f5857ebfdb0aaa114c
SHA512 472a703eeea8958a7bbb20f43c47a30ab2203f4be401da7bd707472e1cc827041a697983ba6802243b6c44e29dea7d471b8e7061705645f5509699d635f65599
SSDEEP 49152:I1BLCPEXpFrXbX6cdzE8sbvnJEIkV766SLN:IDyEXp8qzvYPJgSLN
TLSH
T1E2A52381F7220FF9D172A9F4C45BE2A8E7CC127E6DD01992371C9B09AEC722746CE591
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5144506

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSACloseEvent

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

ntdll

NtQueryInformationProcess

shell32

ShellExecuteA

advapi32

AdjustTokenPrivileges

kernel32

AcquireSRWLockExclusive

user32

ClientToScreen

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

imm32

ImmGetContext

bcrypt

BCryptGenRandom

crypt32

CertAddCertificateContextToStore

wldap32

ord301

vcruntime140

_CxxThrowException

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

__sys_errlist

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-filesystem-l1-1-0

_fstat64

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-multibyte-l1-1-0

_mbschr

api-ms-win-crt-string-l1-1-0

_strdup

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-utility-l1-1-0

qsort

Name

.text

Size

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

533KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.TI>

Size

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.fcZ

Size

512B

Virtual Size

456B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.w2U

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

463B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

76B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

trident_loader.exe

ws2_32

d3d11

d3dcompiler_47

ntdll

shell32

advapi32

kernel32

user32

msvcp140

imm32

bcrypt

crypt32

wldap32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

generic