General

  • Target

    54da392d7204459210bc5035f612f5f7294973de31fc635e2cfc3af40c72aa9b

  • Size

    383KB

  • Sample

    230129-srjjdsde7w

  • MD5

    7273b9a307d1761e38b0cceac3281217

  • SHA1

    a86108e33b221c84ec59c61b8a37febe2a8bbba8

  • SHA256

    54da392d7204459210bc5035f612f5f7294973de31fc635e2cfc3af40c72aa9b

  • SHA512

    62b0dc9696ba720af607acd48337a3273d32702f0cef841f4eac8bd355e3474bef0192baa734f2dae49fcf7fc0376a8489813a68b873f93c55227b64e85dcced

  • SSDEEP

    6144:S+LBazVtCLeY8gHvizRzoSWAB2gAoasce2rr2uXGuh0J9c/DWsHnZnB:dLBazVtCyYNHuoSWzgAbXuuhRz5

Malware Config

Targets

    • Target

      54da392d7204459210bc5035f612f5f7294973de31fc635e2cfc3af40c72aa9b

    • Size

      383KB

    • MD5

      7273b9a307d1761e38b0cceac3281217

    • SHA1

      a86108e33b221c84ec59c61b8a37febe2a8bbba8

    • SHA256

      54da392d7204459210bc5035f612f5f7294973de31fc635e2cfc3af40c72aa9b

    • SHA512

      62b0dc9696ba720af607acd48337a3273d32702f0cef841f4eac8bd355e3474bef0192baa734f2dae49fcf7fc0376a8489813a68b873f93c55227b64e85dcced

    • SSDEEP

      6144:S+LBazVtCLeY8gHvizRzoSWAB2gAoasce2rr2uXGuh0J9c/DWsHnZnB:dLBazVtCyYNHuoSWzgAbXuuhRz5

    • TriumphLoader

      TriumphLoader is a c++ loader based on the open source AbsentLoader.

    • TriumphLoader payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks