Analysis
-
max time kernel
141s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
05-04-2023 12:55
Behavioral task
behavioral1
Sample
8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376.exe
Resource
win10v2004-20230220-en
General
-
Target
8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376.exe
-
Size
1.1MB
-
MD5
eb9fdc083164c0cead39fecaad9aafb4
-
SHA1
19c8782165f56d4153658da5f88f9edd14ae2022
-
SHA256
8cbe32f31befe7c4169f25614afd1778006e4bda6c6091531bc7b4ff4bf62376
-
SHA512
c4c54de23730f5265d29372c21f4f2212a0204f9b83d7fba5dacb0578fbe9f1c95e7521ff892364253f0cd8f4cfbf5befbef387af942714eb4b1b983b0258603
-
SSDEEP
24576:2Y5sZYIcpO4Y4w+xEjN7oQr+O+uvjx8t2mEdp:/Y4470JYj+kmEf
Malware Config
Signatures
-
Detects Trigona ransomware 3 IoCs
resource yara_rule behavioral1/memory/1604-54-0x0000000000400000-0x0000000000526000-memory.dmp family_trigona behavioral1/memory/1604-55-0x0000000000400000-0x0000000000526000-memory.dmp family_trigona behavioral1/memory/1604-56-0x0000000000400000-0x0000000000526000-memory.dmp family_trigona -
Trigona
A ransomware first seen at the beginning of the 2022.