Overview

overview

10

Static

static

10

df9ef29e87...f8.exe

windows7-x64

10

df9ef29e87...f8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df9ef29e8789a798981a783fafbb85395a84e8733929b2c2290bcde263c2f3f8.exe

  • Size

    1.7MB

  • Sample

    250212-g19w6a1kcw

  • MD5

    9bce9dae679419198574f4c9837085db

  • SHA1

    62a24f1ee057e936f3bf01749ecd7e3675d0f10d

  • SHA256

    df9ef29e8789a798981a783fafbb85395a84e8733929b2c2290bcde263c2f3f8

  • SHA512

    9647610d36379a789ab45e21b1997eeff560058cf55374b0a404be9474becca566ec0dd97cbb49b8d54da811bb5fe1e4d2e3e6de9b8fd57825181d611019f467

  • SSDEEP

    24576:6G5C8hr/Vz9ih9i38xVEL/QQPL6BH8kQqNgQ+uH6FqgtMok4+iL:I8hJz8eDsH8kQqNs86F1yU

Score
10/10
trigonadiscoverypersistenceransomwarespywarestealer

Malware Config

Targets

    • Target

      df9ef29e8789a798981a783fafbb85395a84e8733929b2c2290bcde263c2f3f8.exe

    • Size

      1.7MB

    • MD5

      9bce9dae679419198574f4c9837085db

    • SHA1

      62a24f1ee057e936f3bf01749ecd7e3675d0f10d

    • SHA256

      df9ef29e8789a798981a783fafbb85395a84e8733929b2c2290bcde263c2f3f8

    • SHA512

      9647610d36379a789ab45e21b1997eeff560058cf55374b0a404be9474becca566ec0dd97cbb49b8d54da811bb5fe1e4d2e3e6de9b8fd57825181d611019f467

    • SSDEEP

      24576:6G5C8hr/Vz9ih9i38xVEL/QQPL6BH8kQqNgQ+uH6FqgtMok4+iL:I8hJz8eDsH8kQqNs86F1yU

    Score
    10/10
    trigonapersistenceransomwarespywarestealerdiscovery

    • Detects Trigona ransomware

    • Trigona

      A ransomware first seen at the beginning of the 2022.

      ransomwaretrigona

    • Trigona family

      trigona

    • Downloads MZ/PE file

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks