trigona | d168daab4fd03702fcb60af9b380ee785245577e6ad880fa4f117f8559dee596 | Triage

Sharing

General

Target

d168daab4fd03702fcb60af9b380ee785245577e6ad880fa4f117f8559dee596.exe
Size

483KB
Sample

250211-f4fxtaxpfp
MD5

b521ee7d7e2089ab5c68debbb319ca91
SHA1

f35b9109cefb7b8ab27d832472ed89ef7f31a7bb
SHA256

d168daab4fd03702fcb60af9b380ee785245577e6ad880fa4f117f8559dee596
SHA512

a20aa033741253e6eb8c8c7a2cfcd541ec5698a6c7a9e12b8c2a33f54a469729d58d74bff4641bc833e2f8c4b1e023e2cfaf2d45539f21c8ff639f9a77dbb80d
SSDEEP

6144:qZfaSk7FR/pdPYImMETe7iJXy+P8pkf5PMb6w9BRvaH+JDhqqDLuJQsNqRLRnzCx:6zIRxd0e7dg9Mb6y0Nqnu4VzCee

Score

10^/10

trigona discovery ransomware

Malware Config

Targets

- Target
  
  d168daab4fd03702fcb60af9b380ee785245577e6ad880fa4f117f8559dee596.exe
- Size
  
  483KB
- MD5
  
  b521ee7d7e2089ab5c68debbb319ca91
- SHA1
  
  f35b9109cefb7b8ab27d832472ed89ef7f31a7bb
- SHA256
  
  d168daab4fd03702fcb60af9b380ee785245577e6ad880fa4f117f8559dee596
- SHA512
  
  a20aa033741253e6eb8c8c7a2cfcd541ec5698a6c7a9e12b8c2a33f54a469729d58d74bff4641bc833e2f8c4b1e023e2cfaf2d45539f21c8ff639f9a77dbb80d
- SSDEEP
  
  6144:qZfaSk7FR/pdPYImMETe7iJXy+P8pkf5PMb6w9BRvaH+JDhqqDLuJQsNqRLRnzCx:6zIRxd0e7dg9Mb6y0Nqnu4VzCee
Score

10^/10

trigona ransomware discovery
- Trigona
  A ransomware first seen at the beginning of the 2022.
  ransomware trigona
- Trigona family
  trigona
- Downloads MZ/PE file
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

trigonaransomware

behavioral2

trigonadiscoveryransomware