trigona | 8c6c21855aff960c7f445472342e768144f5838c246847ab5afb806841590745 | Triage

Sharing

General

Target

8c6c21855aff960c7f445472342e768144f5838c246847ab5afb806841590745.exe
Size

338KB
Sample

250211-thzdxssjcw
MD5

36a52cda091a0d5b20a567f0015308b4
SHA1

98c61b12b4d5988b82e54b62f91c564edec00722
SHA256

8c6c21855aff960c7f445472342e768144f5838c246847ab5afb806841590745
SHA512

4e3144359815ee380248674ae0b6592d67ed36d5fcee6ae41f483a093af47726cbb55693dd871cceab923d0d8e7eed8a317e291b6822dcc2da929b429db7e220
SSDEEP

6144:Fx2QdiglMFvsgR3M20JAEpugtfnqqDLuP+bFA+nguEeJ5:FAQsgSygNb21JfqqnuGbqSgH45

Score

10^/10

trigona credential_access discovery ransomware spyware stealer

Malware Config

Targets

- Target
  
  8c6c21855aff960c7f445472342e768144f5838c246847ab5afb806841590745.exe
- Size
  
  338KB
- MD5
  
  36a52cda091a0d5b20a567f0015308b4
- SHA1
  
  98c61b12b4d5988b82e54b62f91c564edec00722
- SHA256
  
  8c6c21855aff960c7f445472342e768144f5838c246847ab5afb806841590745
- SHA512
  
  4e3144359815ee380248674ae0b6592d67ed36d5fcee6ae41f483a093af47726cbb55693dd871cceab923d0d8e7eed8a317e291b6822dcc2da929b429db7e220
- SSDEEP
  
  6144:Fx2QdiglMFvsgR3M20JAEpugtfnqqDLuP+bFA+nguEeJ5:FAQsgSygNb21JfqqnuGbqSgH45
Score

10^/10

trigona credential_access discovery ransomware spyware stealer
- Trigona
  A ransomware first seen at the beginning of the 2022.
  ransomware trigona
- Trigona family
  trigona
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Windows Credential Manager

Unsecured Credentials

Credentials In Files

Discovery

Browser Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

trigonacredential_accessdiscoveryransomwarespywarestealer

behavioral2

trigonadiscoveryransomware