Overview

overview

10

Static

static

6e2a2ac4d6...2b.exe

windows7-x64

10

6e2a2ac4d6...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e2a2ac4d64d3843e08602f1f10f3bfa4eb6b1433361226cdeffe28f3236812b

  • Size

    451KB

  • Sample

    230129-wf94raga83

  • MD5

    e944f222fae6f727f0a7b2e148947c08

  • SHA1

    3e6417b1028234a015c6c3166878fea6fd082985

  • SHA256

    6e2a2ac4d64d3843e08602f1f10f3bfa4eb6b1433361226cdeffe28f3236812b

  • SHA512

    63d7463d1402b125230004aa80921b77bacc926835e719d259963018c2f4ad176874f4014194e7f48df96a276c4bdbdc87d282566387dece95028871cb8356de

  • SSDEEP

    12288:eRtB7ZfsvpaczkUappXQ9cvykBU9QJ3AeQg2Jz8Cv1N:eRt9ZiaSjap1NKZzeBDC9N

Score
10/10
triumphloaderloadertrojan

Malware Config

Targets

    • Target

      6e2a2ac4d64d3843e08602f1f10f3bfa4eb6b1433361226cdeffe28f3236812b

    • Size

      451KB

    • MD5

      e944f222fae6f727f0a7b2e148947c08

    • SHA1

      3e6417b1028234a015c6c3166878fea6fd082985

    • SHA256

      6e2a2ac4d64d3843e08602f1f10f3bfa4eb6b1433361226cdeffe28f3236812b

    • SHA512

      63d7463d1402b125230004aa80921b77bacc926835e719d259963018c2f4ad176874f4014194e7f48df96a276c4bdbdc87d282566387dece95028871cb8356de

    • SSDEEP

      12288:eRtB7ZfsvpaczkUappXQ9cvykBU9QJ3AeQg2Jz8Cv1N:eRt9ZiaSjap1NKZzeBDC9N

    Score
    10/10
    triumphloaderloadertrojan

    • TriumphLoader

      TriumphLoader is a c++ loader based on the open source AbsentLoader.

      trojanloadertriumphloader

    • TriumphLoader payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks