trigona | 13c63827036a885eec32a032d4f8b1685289829650d37abf591337384fca230c | Triage

Sharing

General

Target

13c63827036a885eec32a032d4f8b1685289829650d37abf591337384fca230c.exe
Size

338KB
Sample

250213-cvnphs1pcl
MD5

155569b791e9a12e68c173170ea84ea8
SHA1

783a1b4792768379faa3659152a9f70c34083f34
SHA256

13c63827036a885eec32a032d4f8b1685289829650d37abf591337384fca230c
SHA512

06bc20a8978ae6aa802bea4c8df9ecdc8f5dade79d7f2fdcded2ca26e41deaf8d1d6d659c581649ca946bc828da9c810b8ac0403eca279f1077c2382f0496861
SSDEEP

6144:lx2QdiglMFvsgR3M20JAEpugtfnqqDLuP+dG+k0v/8kHOu0:lAQsgSygNb21JfqqnuGdG+1EkX0

Score

10^/10

trigona credential_access discovery ransomware spyware stealer

Malware Config

Targets

- Target
  
  13c63827036a885eec32a032d4f8b1685289829650d37abf591337384fca230c.exe
- Size
  
  338KB
- MD5
  
  155569b791e9a12e68c173170ea84ea8
- SHA1
  
  783a1b4792768379faa3659152a9f70c34083f34
- SHA256
  
  13c63827036a885eec32a032d4f8b1685289829650d37abf591337384fca230c
- SHA512
  
  06bc20a8978ae6aa802bea4c8df9ecdc8f5dade79d7f2fdcded2ca26e41deaf8d1d6d659c581649ca946bc828da9c810b8ac0403eca279f1077c2382f0496861
- SSDEEP
  
  6144:lx2QdiglMFvsgR3M20JAEpugtfnqqDLuP+dG+k0v/8kHOu0:lAQsgSygNb21JfqqnuGdG+1EkX0
Score

10^/10

trigona credential_access discovery ransomware spyware stealer
- Trigona
  A ransomware first seen at the beginning of the 2022.
  ransomware trigona
- Trigona family
  trigona
- Downloads MZ/PE file
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Windows Credential Manager

Unsecured Credentials

Credentials In Files

Discovery

Browser Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

trigonacredential_accessdiscoveryransomwarespywarestealer

behavioral2

trigonacredential_accessdiscoveryransomwarespywarestealer