Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-27_3637a397b30237dfdef72a21eb542d33_datper_trigona
-
Size
342KB
-
Sample
241027-2ah1zavcjq
-
MD5
3637a397b30237dfdef72a21eb542d33
-
SHA1
062f483ea216bf9628e7a5a6484653c107483378
-
SHA256
6ac8e08c1610cc82bf7d6ee67a53e3a3e3dc72790550d110572ed42a9aa48f43
-
SHA512
6b3ae6121ee3ae6e7023e591df2ded36c8a7abd35ca6f655a3194c1efec20955f8dab4b7838f37e142e0d00c54fde3c6df7f77990aadea956c65f631965e8f31
-
SSDEEP
6144:Gx2QdiglMFGfzIBeZO8Wf2cMRWCO/xZqqDLuz+4pQoL27aR9:GAQsgScEydWCJqnuq4z2mR9
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-27_3637a397b30237dfdef72a21eb542d33_datper_trigona.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-27_3637a397b30237dfdef72a21eb542d33_datper_trigona.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-10-27_3637a397b30237dfdef72a21eb542d33_datper_trigona
-
Size
342KB
-
MD5
3637a397b30237dfdef72a21eb542d33
-
SHA1
062f483ea216bf9628e7a5a6484653c107483378
-
SHA256
6ac8e08c1610cc82bf7d6ee67a53e3a3e3dc72790550d110572ed42a9aa48f43
-
SHA512
6b3ae6121ee3ae6e7023e591df2ded36c8a7abd35ca6f655a3194c1efec20955f8dab4b7838f37e142e0d00c54fde3c6df7f77990aadea956c65f631965e8f31
-
SSDEEP
6144:Gx2QdiglMFGfzIBeZO8Wf2cMRWCO/xZqqDLuz+4pQoL27aR9:GAQsgScEydWCJqnuq4z2mR9
Score7/10-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops desktop.ini file(s)
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1