General
- Target b64409a8a96c8049183132c22020fb723f2949cf1ee034e18d656d37a4d30e8f
- Size 974KB
- Sample221130-xsdrraff86
- SHA256 b64409a8a96c8049183132c22020fb723f2949cf1ee034e18d656d37a4d30e8f
- MD5 f5ed4a29db1a7970304b8ecf87c7dc52
- SHA1 9219076e0e0606370e56fe669c2d15d46471509b
- SHA512 69b4d4bda95bd1af83e80d5ec594b3d2b66bd784fbb0a20a1267594fff97fbd4a6bc4ed33d42e2baeb94fb4eb976e889f23781b8d979a63d49edb28024eaac11
- SSDEEP 12288:yH0Hxl/wEGaZpo37UBh2QhJry48ceJ04g7gsd4iycJ3LA969Fe0su:ki/m7UBQQN8ceJ0v7gseqc
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
b64409a8a96c8049183132c22020fb723f2949cf1ee034e18d656d37a4d30e8f.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b64409a8a96c8049183132c22020fb723f2949cf1ee034e18d656d37a4d30e8f.exe
Resource
win10v2004-20220901-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target b64409a8a96c8049183132c22020fb723f2949cf1ee034e18d656d37a4d30e8f
- Size 974KB
- SHA256 b64409a8a96c8049183132c22020fb723f2949cf1ee034e18d656d37a4d30e8f
- MD5 f5ed4a29db1a7970304b8ecf87c7dc52
- SHA1 9219076e0e0606370e56fe669c2d15d46471509b
- SHA512 69b4d4bda95bd1af83e80d5ec594b3d2b66bd784fbb0a20a1267594fff97fbd4a6bc4ed33d42e2baeb94fb4eb976e889f23781b8d979a63d49edb28024eaac11
- SSDEEP 12288:yH0Hxl/wEGaZpo37UBh2QhJry48ceJ04g7gsd4iycJ3LA969Fe0su:ki/m7UBQQN8ceJ0v7gseqc
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
TriumphLoader
TriumphLoader is a c++ loader based on the open source AbsentLoader.
-
TriumphLoader payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.