2026-07-26_1a1c445d27b67d413c4ac0eab361ea41_trigona

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-26_1a1c445d27b67d413c4ac0eab361ea41_trigona
Size 615KB
Sample260726-24dcksem6v
SHA256 0ec88a0fcd5c4a2713bf48583cd3f5c5da080d52207a522d760af9670f6cc004
MD5 1a1c445d27b67d413c4ac0eab361ea41
SHA1 1847ee734e8e796350fb50b6868400b94b0c0af3
SHA512 a49ef64b3fbd42686674c99497502f308e7b597aa78c5376739f06ee9c31e45feef1c4497897f50f99681cf74427291f798e86c3a9d5c6845dfb5db95f9a5aa6
SSDEEP 6144:n0cHjvtIRXL15zA6d+p/UXDC26ZOh1OkyHMCg8uvwl08qvpjJMsqqDLuexsxAC+e:BeRXDepsCUjLCg8Bq0qnuVAG48
TLSH
T1B0D44B6E72E4872CD076C576C8A64B62A532789C8737C1FF108082A1DFD0ED5A93BB75
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-26_1a1c445d27b67d413c4ac0eab361ea41_trigona

File Explorer

2026-07-26_1a1c445d27b67d413c4ac0eab361ea41_trigona

.exe 615KB

2026-07-26_1a1c445d27b67d413c4ac0eab361ea41_trigona

IMPHASH 16529ded687a5d63197c7c4ba1ad04db
SHA256 0ec88a0fcd5c4a2713bf48583cd3f5c5da080d52207a522d760af9670f6cc004
MD5 1a1c445d27b67d413c4ac0eab361ea41
SHA1 1847ee734e8e796350fb50b6868400b94b0c0af3
SHA512 a49ef64b3fbd42686674c99497502f308e7b597aa78c5376739f06ee9c31e45feef1c4497897f50f99681cf74427291f798e86c3a9d5c6845dfb5db95f9a5aa6
SSDEEP 6144:n0cHjvtIRXL15zA6d+p/UXDC26ZOh1OkyHMCg8uvwl08qvpjJMsqqDLuexsxAC+e:BeRXDepsCUjLCg8Bq0qnuVAG48
TLSH
T1B0D44B6E72E4872CD076C576C8A64B62A532789C8737C1FF108082A1DFD0ED5A93BB75
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

470352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

kernel32

SetFileAttributesW GetFileType SetFileTime GetFileTime RtlUnwindEx QueryDosDeviceW GetACP CloseHandle LocalFree SizeofResource GetCurrentProcessId FindNextFileW VirtualFree ExitProcess GetNumberOfConsoleInputEvents RtlUnwind SetFilePointerEx GetCPInfo EnumSystemLocalesW GetStdHandle FileTimeToLocalFileTime GetModuleHandleW FreeLibrary FileTimeToDosDateTime ReadFile CreateProcessW GetLastError GetModuleFileNameW SetLastError FindResourceW CreateThread CompareStringW GetFileSizeEx LoadLibraryA ResetEvent GetVolumeInformationW FreeResource GetVersion GetDriveTypeW RaiseException MoveFileW FormatMessageW OpenProcess SwitchToThread LockResource LoadLibraryExW TerminateProcess SetPriorityClass GetCurrentThreadId UnhandledExceptionFilter VirtualQuery Sleep EnterCriticalSection GetDiskFreeSpaceExW SetFilePointer LoadResource GetTickCount GetFileSize GetStartupInfoW GetFileAttributesW InitializeCriticalSection GetCurrentProcess AllocConsole VirtualAlloc GetCommandLineW GetSystemInfo GetTempPathW LeaveCriticalSection GetProcAddress GetLogicalDriveStringsW GetVersionExW VerifyVersionInfoW GetWindowsDirectoryW LCMapStringW VerSetConditionMask GetDiskFreeSpaceW FindFirstFileW GetUserDefaultUILanguage GetConsoleOutputCP GetConsoleCP PeekConsoleInputW lstrlenW QueryPerformanceCounter SetEndOfFile WideCharToMultiByte FindClose MultiByteToWideChar SetEvent GetLocaleInfoW CreateFileW DeleteFileW IsDBCSLeadByteEx FreeConsole GetLocalTime GetEnvironmentVariableW WaitForSingleObject WriteFile FlushConsoleInputBuffer DeleteCriticalSection TlsGetValue SetErrorMode GetComputerNameW IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW SetThreadLocale GetThreadLocale

wsock32

gethostbyaddr WSAStartup closesocket socket

ws2_32

WSAIoctl

shell32

ShellExecuteW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

user32

CharUpperBuffA CharUpperBuffW CharNextW CharLowerBuffW LoadStringW CharUpperW GetSystemMetrics MessageBoxW

iphlpapi

GetIpNetTable

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

netapi32

NetWkstaGetInfo NetApiBufferFree NetShareEnum

advapi32

CloseServiceHandle CreateProcessWithLogonW GetSidSubAuthorityCount AdjustTokenPrivileges LookupPrivilegeValueW OpenSCManagerW RegOpenKeyExW OpenProcessToken AllocateAndInitializeSid FreeSid DuplicateTokenEx RegQueryValueExW GetSidSubAuthority SetTokenInformation GetTokenInformation RegCloseKey LookupAccountSidW EnumServicesStatusA EnumServicesStatusW

Name

.text

Size

475KB

Virtual Size

475KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

46KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

113B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

560B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

109B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.pdata

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-26_1a1c445d27b67d413c4ac0eab361ea41_trigona

kernel32

wsock32

ws2_32

shell32

version

user32

iphlpapi

oleaut32

netapi32

advapi32

generic