Resubmissions

09/08/2024, 16:03

240809-thb9dswerh 10

24/02/2021, 17:21

210224-vr75z6bg5n 10

General

  • Target

    ed5c086f90c82e755393dd4d183d8323.exe

  • Size

    369KB

  • Sample

    240809-thb9dswerh

  • MD5

    ed5c086f90c82e755393dd4d183d8323

  • SHA1

    50900629dd2d2e39d67e8fa098e2460e2d899139

  • SHA256

    c7af3849210fbedaa9447012d804ccb362d66a34e7d636ea1b97d0a8115f022c

  • SHA512

    7345707c182898eb134250dd3de5870a36c45a522a363d7c9b06df72b9fe81785c4c448d8efb2a748a5b578783d6282ce499d03f2ce8d624e408f5bde18c328e

  • SSDEEP

    6144:SP+ESgo6HYAkY4u1gXwztMaKjNBl/wO+tLL5A8ybLUxjwi:C+soU7kY4u1Mwz7KjYtLL5AVb

Malware Config

Targets

    • Target

      ed5c086f90c82e755393dd4d183d8323.exe

    • Size

      369KB

    • MD5

      ed5c086f90c82e755393dd4d183d8323

    • SHA1

      50900629dd2d2e39d67e8fa098e2460e2d899139

    • SHA256

      c7af3849210fbedaa9447012d804ccb362d66a34e7d636ea1b97d0a8115f022c

    • SHA512

      7345707c182898eb134250dd3de5870a36c45a522a363d7c9b06df72b9fe81785c4c448d8efb2a748a5b578783d6282ce499d03f2ce8d624e408f5bde18c328e

    • SSDEEP

      6144:SP+ESgo6HYAkY4u1gXwztMaKjNBl/wO+tLL5A8ybLUxjwi:C+soU7kY4u1Mwz7KjYtLL5AVb

    • Detects TriumphLoader

      Detects TriumphLoader.

    • TriumphLoader

      TriumphLoader is a c++ loader based on the open source AbsentLoader.

    • TriumphLoader payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks