Overview

overview

10

Static

static

3

8f85ebeafa...18.exe

windows7-x64

10

8f85ebeafa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f85ebeafa44681fc4b8e10342722499_JaffaCakes118

  • Size

    485KB

  • Sample

    240812-vdw9fazfnk

  • MD5

    8f85ebeafa44681fc4b8e10342722499

  • SHA1

    fbdb1a95913a752cbe80313cc80d4363b9bfc981

  • SHA256

    1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e

  • SHA512

    3959fb203d6c2bf6f445c026d36f7e7848271a84b8e9132a1e58d8b24c9903617dd2e34677e5422d75702faef1d6e0e775f8745202d3b4dd288fb319beae1900

  • SSDEEP

    6144:GCrmIi+E4cu3O6Jgb2Wf3urb7+ubYihDwUWxid9ZKWw8Um5uukm8nz1lxWdF:7mIiR5u+6ebl3A+ubYK0Uy2ZKJnzRW

Score
10/10
triumphloaderdiscoveryloadertrojan

Malware Config

Targets

    • Target

      8f85ebeafa44681fc4b8e10342722499_JaffaCakes118

    • Size

      485KB

    • MD5

      8f85ebeafa44681fc4b8e10342722499

    • SHA1

      fbdb1a95913a752cbe80313cc80d4363b9bfc981

    • SHA256

      1e3d43db0f7df4d61d57d9c867f9217ba69c61b58563a3893ea4fff75cf81a1e

    • SHA512

      3959fb203d6c2bf6f445c026d36f7e7848271a84b8e9132a1e58d8b24c9903617dd2e34677e5422d75702faef1d6e0e775f8745202d3b4dd288fb319beae1900

    • SSDEEP

      6144:GCrmIi+E4cu3O6Jgb2Wf3urb7+ubYihDwUWxid9ZKWw8Um5uukm8nz1lxWdF:7mIiR5u+6ebl3A+ubYK0Uy2ZKJnzRW

    Score
    10/10
    triumphloaderloadertrojandiscovery

    • TriumphLoader

      TriumphLoader is a c++ loader based on the open source AbsentLoader.

      trojanloadertriumphloader

    • TriumphLoader payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks