General
- Target 3c38eb510b9a2616b648de7734a8772a9739102599e7e128cc520d8b958b57d5
- Size 368KB
- Sample230129-tt5ebaeh6w
- SHA256 3c38eb510b9a2616b648de7734a8772a9739102599e7e128cc520d8b958b57d5
- MD5 17358cc82a59b6403afb0ab287ab5629
- SHA1 778da0baf186f31b6c7b525fc112bb070514f4b0
- SHA512 8a58ef4a5bb03337f785bf2dcf1e212b6f28e5bbb8da906b84e4e1d8b6c4c70e361a4ca1235e1cffab9b5e899e869ee8782ec7e114018a2d1315f09190d6fc89
- SSDEEP 6144:NbfDIM2SpQtijNZ9ZtEYB5bY0xRWRrrDJwwD4GizoIVwoeyEE30GLfijJO:Nb0eCy9ZtEwmzaw0GizBi3yEs/Lfq
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
3c38eb510b9a2616b648de7734a8772a9739102599e7e128cc520d8b958b57d5.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c38eb510b9a2616b648de7734a8772a9739102599e7e128cc520d8b958b57d5.exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3c38eb510b9a2616b648de7734a8772a9739102599e7e128cc520d8b958b57d5
- Size 368KB
- SHA256 3c38eb510b9a2616b648de7734a8772a9739102599e7e128cc520d8b958b57d5
- MD5 17358cc82a59b6403afb0ab287ab5629
- SHA1 778da0baf186f31b6c7b525fc112bb070514f4b0
- SHA512 8a58ef4a5bb03337f785bf2dcf1e212b6f28e5bbb8da906b84e4e1d8b6c4c70e361a4ca1235e1cffab9b5e899e869ee8782ec7e114018a2d1315f09190d6fc89
- SSDEEP 6144:NbfDIM2SpQtijNZ9ZtEYB5bY0xRWRrrDJwwD4GizoIVwoeyEE30GLfijJO:Nb0eCy9ZtEwmzaw0GizBi3yEs/Lfq
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
TriumphLoader
TriumphLoader is a c++ loader based on the open source AbsentLoader.
-
TriumphLoader payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.