Overview

overview

10

Static

static

c486a49001...0b.exe

windows7-x64

10

c486a49001...0b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c486a490014902ef7c1bfbea8b7ca22149da5de3d52fdef46d7e5ea3853a2d0b

  • Size

    383KB

  • Sample

    230129-ts426aeh4s

  • MD5

    da722dc2d1f9d50565f559fca222c02e

  • SHA1

    b0b394bb73bd034aee69f8d9180f12559026bd5e

  • SHA256

    c486a490014902ef7c1bfbea8b7ca22149da5de3d52fdef46d7e5ea3853a2d0b

  • SHA512

    68bc25284d42fa1fa9b7916d0ab7b8594276f40e8448e0a488102a10d54720c2a933a7553252a1059b0d085cf5e69499240a27a98301095c28e8558b284a9638

  • SSDEEP

    6144:XMQEWI9VWILS452oxzQj2lzIHgYlYy9JauK4nRVIkvmbWw+QHxG//RnrmJj:8QLI9VWI+4HdjlzMR9jP5irxau

Score
10/10
triumphloaderloadertrojan

Malware Config

Targets

    • Target

      c486a490014902ef7c1bfbea8b7ca22149da5de3d52fdef46d7e5ea3853a2d0b

    • Size

      383KB

    • MD5

      da722dc2d1f9d50565f559fca222c02e

    • SHA1

      b0b394bb73bd034aee69f8d9180f12559026bd5e

    • SHA256

      c486a490014902ef7c1bfbea8b7ca22149da5de3d52fdef46d7e5ea3853a2d0b

    • SHA512

      68bc25284d42fa1fa9b7916d0ab7b8594276f40e8448e0a488102a10d54720c2a933a7553252a1059b0d085cf5e69499240a27a98301095c28e8558b284a9638

    • SSDEEP

      6144:XMQEWI9VWILS452oxzQj2lzIHgYlYy9JauK4nRVIkvmbWw+QHxG//RnrmJj:8QLI9VWI+4HdjlzMR9jP5irxau

    Score
    10/10
    triumphloaderloadertrojan

    • TriumphLoader

      TriumphLoader is a c++ loader based on the open source AbsentLoader.

      trojanloadertriumphloader

    • TriumphLoader payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks