Overview

overview

10

Static

static

10

d743daa22f...8a.exe

windows7-x64

10

d743daa22f...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d743daa22fdf4313a10da027b034c603eda255be037cb45b28faea23114d3b8a.exe

  • Size

    1.1MB

  • Sample

    250212-gvx1ea1jbw

  • MD5

    1852be15aa8dcf664291b3849bd348e4

  • SHA1

    eea811d2a304101cc0b0edebe6590ea0f3da0a27

  • SHA256

    d743daa22fdf4313a10da027b034c603eda255be037cb45b28faea23114d3b8a

  • SHA512

    91ca1d44fa98a43dbc53541cecb8ca656df01d6dc57783f12c70df49347520e150796834731b56107976b5b9dc915006d18caf39ac6792187d605542452bd4eb

  • SSDEEP

    24576:hY6frxBDmkY+Jr0Iql2v4sx+uxtTyJuqe:bKuTvBwSdCud

Score
10/10
trigonadiscoverypersistenceransomware

Malware Config

Targets

    • Target

      d743daa22fdf4313a10da027b034c603eda255be037cb45b28faea23114d3b8a.exe

    • Size

      1.1MB

    • MD5

      1852be15aa8dcf664291b3849bd348e4

    • SHA1

      eea811d2a304101cc0b0edebe6590ea0f3da0a27

    • SHA256

      d743daa22fdf4313a10da027b034c603eda255be037cb45b28faea23114d3b8a

    • SHA512

      91ca1d44fa98a43dbc53541cecb8ca656df01d6dc57783f12c70df49347520e150796834731b56107976b5b9dc915006d18caf39ac6792187d605542452bd4eb

    • SSDEEP

      24576:hY6frxBDmkY+Jr0Iql2v4sx+uxtTyJuqe:bKuTvBwSdCud

    Score
    10/10
    trigonadiscoverypersistenceransomware

    • Detects Trigona ransomware

    • Trigona

      A ransomware first seen at the beginning of the 2022.

      ransomwaretrigona

    • Trigona family

      trigona

    • Downloads MZ/PE file

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks