triumphloader | fb081199ada745e95dedc88284ba2504ce879cbfc6dd86243bb5bbee6cc153b9 | Triage

Submit
Reports

Overview

overview

Static

static

3

c4f6c46caf...18.exe

windows7-x64

c4f6c46caf...18.exe

windows10-2004-x64

Sharing

General

Target

c4f6c46caff0a633015943c076b55e78_JaffaCakes118
Size

906KB
Sample

240827-paanda1fkp
MD5

c4f6c46caff0a633015943c076b55e78
SHA1

edf7c89bfe1d4bf36d17d83e05a895c0f9938e1f
SHA256

fb081199ada745e95dedc88284ba2504ce879cbfc6dd86243bb5bbee6cc153b9
SHA512

77ce40a96bfc3a9e32e346724101c9470e0a8c465a1a3232d8556b5f960ab5c552a5e309480faf1cc6ec7bdc58a4b5c95cafa11b2bb5dfc22e2320bc96af32fa
SSDEEP

12288:v05a/N5c4SeAjKPDKXXhzfNwaW8wkEsI0mhyUQU8UjMG:v00YKPDSzfAkmdbQz

Score

10^/10

triumphloader discovery loader trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c4f6c46caff0a633015943c076b55e78_JaffaCakes118.exe

Resource

win7-20240708-en

triumphloader discovery loader trojan

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

c4f6c46caff0a633015943c076b55e78_JaffaCakes118.exe

Resource

win10v2004-20240802-en

triumphloader discovery loader trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  c4f6c46caff0a633015943c076b55e78_JaffaCakes118
- Size
  
  906KB
- MD5
  
  c4f6c46caff0a633015943c076b55e78
- SHA1
  
  edf7c89bfe1d4bf36d17d83e05a895c0f9938e1f
- SHA256
  
  fb081199ada745e95dedc88284ba2504ce879cbfc6dd86243bb5bbee6cc153b9
- SHA512
  
  77ce40a96bfc3a9e32e346724101c9470e0a8c465a1a3232d8556b5f960ab5c552a5e309480faf1cc6ec7bdc58a4b5c95cafa11b2bb5dfc22e2320bc96af32fa
- SSDEEP
  
  12288:v05a/N5c4SeAjKPDKXXhzfNwaW8wkEsI0mhyUQU8UjMG:v00YKPDSzfAkmdbQz
Score

10^/10

triumphloader discovery loader trojan
- TriumphLoader
  TriumphLoader is a c++ loader based on the open source AbsentLoader.
  trojan loader triumphloader
- TriumphLoader payload
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

triumphloaderdiscoveryloadertrojan

behavioral2

triumphloaderdiscoveryloadertrojan

© 2018-2025

Terms | Privacy