Resubmissions

12/02/2024, 19:56

240212-ynry9ada6410

12/02/2024, 19:35

240212-yazryabb7s10

04/02/2024, 01:11

240204-bjxbvadhh9

23/01/2024, 03:08

240123-dnenpsfccr10

General

  • Target
    c28b33f7365f9dc72cc291d13458f334.bin
  • Size 186KB
  • Sample240123-dnenpsfccr
  • SHA256 92241867812099edddb6061a00d36b49268a1c54524833427f2a2aa967f183ae
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431.exe
    • Size 342KB
    • SHA256 85f4088286ac1eedc94ad9dc6465e9e4b89d1cde3012f9949450fcc9f2b60431
    • MD5 SHA1 SHA512 SSDEEP
    • Trigona

      A ransomware first seen at the beginning of the 2022.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks