General

  • Target

    cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3

  • Size

    1.0MB

  • Sample

    230129-t66sxaea46

  • MD5

    9bd15f32f41faad427d75292516aab16

  • SHA1

    5d06e38f80ffea74a4f90988df62b1404be63736

  • SHA256

    cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3

  • SHA512

    8d44d609556e41137f1b4f16384c47b8694fdd8aefd73e8d9468c85c013bcdf1ce1bef600cdf1122afb74abce5e2306e2a0edade5cdd013bc526641618472ae7

  • SSDEEP

    12288:B8wkEsI0mhyUQU8Uj0Gb05a/N5c4SeAjKPDKXXhzfNwa:PkmdbQPu00YKPDSzf

Malware Config

Targets

    • Target

      cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3

    • Size

      1.0MB

    • MD5

      9bd15f32f41faad427d75292516aab16

    • SHA1

      5d06e38f80ffea74a4f90988df62b1404be63736

    • SHA256

      cbca0165be6129d1c63d35a084780d748bbfde3bc0a8983bb7ff1ee884efc0e3

    • SHA512

      8d44d609556e41137f1b4f16384c47b8694fdd8aefd73e8d9468c85c013bcdf1ce1bef600cdf1122afb74abce5e2306e2a0edade5cdd013bc526641618472ae7

    • SSDEEP

      12288:B8wkEsI0mhyUQU8Uj0Gb05a/N5c4SeAjKPDKXXhzfNwa:PkmdbQPu00YKPDSzf

    • TriumphLoader

      TriumphLoader is a c++ loader based on the open source AbsentLoader.

    • TriumphLoader payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks