Trigona

According to PCrisk, Trigona is ransomware that encrypts files and appends the ._locked extension to filenames. Also, it drops the how_to_decrypt.hta file that opens a ransom note. An example of how Trigona renames files: it renames 1.jpg to 1.jpg._locked, 2.png to 2.png._locked, and so forth.It embeds the encrypted decryption key, the campaign ID, and the victim ID in the encrypted files.

External information

Victims

49

First Discovered

victim

2023-04-17

Last Discovered

victim

2024-03-30

Inactive Since

more than

1 year

Avg Delay

between attack and claim

10.2 days

Infostealer

for victim with domain

13.3%

View Victims on World Map

View group statistics

Known Locations (4)

Title	Available	Last Visit	FQDN
Trigona is Gone	No	2025-06-01 21:18:23	`3x55o3u2b7cjs54eifja5m3ottxntlubhjzt6k6htp5nrocjmsxxh7ad.onion`
Blog	No	2025-06-01 21:18:30	`6n5tfadusp4sarzuxntz34q4ohspiaya2mc6aw6uhlusfqfsdomavyyd.onion`
Trigona is Gone	No	2025-06-01 21:19:26	`trigonax2zb3fw34rbaap4cqep76zofxs53zakrdgcxzq6xzt24l5lqd.onion`
Blog	No	2025-06-01 21:19:34	`krsbhaxbki6jr4zvwblvkaqzjkircj7cxf46qt3na5o5sj2hpikbupqd.onion`

Target (Available)

Heatmap (Available)

Ransom Notes (1)

Tools Used (Available)

This information is provided by Ransomware-Tool-Matrix
Discovery	RMM Tools	Defense Evasion	Credential Theft	OffSec	Networking	LOLBAS	Exfiltration
Advanced Port Scanner SoftPerfect NetScan placeholder placeholder placeholder	AnyDesk LogMeIn ScreenConnect Splashtop TeamViewer	placeholder placeholder placeholder placeholder placeholder	Mimikatz placeholder placeholder placeholder placeholder	Cobalt Strike placeholder placeholder placeholder placeholder	placeholder placeholder placeholder placeholder placeholder	placeholder placeholder placeholder placeholder placeholder	MEGA RClone placeholder placeholder placeholder

Vulnerabilities Exploited (0)

TTPs Matrix (0)

Negotiation Chats (0)

YARA Rules (0)

Indicators of Compromise (IoCs) (117)

MD5 117

Type	IOC
`md5`	`f78073b1b2de009645a0254507b87a37`
`md5`	`7f7c78fb5d9fdee28996a3f12bd00fef`
`md5`	`68635ad9d12f683071611bfd34c1ec34`
`md5`	`b59a9174ff768633e2cf5dfb16e516a8`
`md5`	`2c83e59eea3e6890d31adc7c518e3702`
`md5`	`c62620dc472f8e2835ad3abc6acd6e35`
`md5`	`c28b33f7365f9dc72cc291d13458f334`
`md5`	`2c31a750240788f924ef64a2fb4fdf3b`
`md5`	`5f3407dedd4b9bf1e57209cc2178b8dc`
`md5`	`21477e62d5ddebf6fcb1ecb8002d0c8c`
`md5`	`f78deca349a87b5966e3566ada4fb3e8`
`md5`	`72c38f2bb567386f71c4517638dbcb8f`
`md5`	`51c6124113221d1bf27e21c6fbbd1a97`
`md5`	`d38b90dc371589519336d0c092529213`
`md5`	`538c61b8d943a62f5978ac69e44f9c11`
`md5`	`399bcaf347b3c9a024f1cd63cc62b193`
`md5`	`1f2e30361154ecc055bfe96e22bbef20`
`md5`	`ade360987f5cca7d29e9de4b8fd8fe53`
`md5`	`0161027a354f9a1fc8e605261400fba9`
`md5`	`ebbdb20711323dc22a5619ea3a3a2f25`
`md5`	`2d0973538cb4ae6347ad592e64cea59f`
`md5`	`00380c75734fd72885b315c53b4e9774`
`md5`	`4eb6c2e3ff883a49b7709f97bfdf7079`
`md5`	`97f9d8c8d44da37c7b9cefe31bda3466`
`md5`	`0d928467bf7d0226f95eed9af9f2e650`
`md5`	`db0d857a85478d3271c404548574d88f`
`md5`	`ee6ece14cd94c5a7ba9e47bca260c1f2`
`md5`	`4c282ce56a6991de050c2d8ea93d2b77`
`md5`	`93472c81a0f33a18fa8f88c8b2814356`
`md5`	`155569b791e9a12e68c173170ea84ea8`
`md5`	`8e2965a4dd7a27ed1b304ac03ad4d728`
`md5`	`b230c3f70c8f30c17279452b353dc5ba`
`md5`	`b2207b0c5793df85dd216dfbf9c2315d`
`md5`	`27c7b397960d96a974a704b7f24dd8a8`
`md5`	`a4ccd1a3ee084e7356cffb3e0a41eab1`
`md5`	`edcdc4df9344765a584561e0a0f64676`
`md5`	`d953809c842ada81c92bfbf9c7088671`
`md5`	`eda59d39892f40dbd14925432f9ba108`
`md5`	`018d410685c743dedaad1dff81486dd7`
`md5`	`fa2c07869bbc5d77c28eb79ef452c0c9`
`md5`	`75acf47d1c2ff932b1b2b61e17424826`
`md5`	`39fac17fb009f7995348e9265ca983a9`
`md5`	`fead64a37461b9e5d0875ebec870152a`
`md5`	`53d89e90a54fef428f74eed41b14fb38`
`md5`	`ebc321e4c8b761c50d13dc0d8cb86d72`
`md5`	`b7271756136f8f07923acae4e64f8efa`
`md5`	`1da7262950658cbf6557d996658aecd6`
`md5`	`d71036dbaff60b41cc4fd767be595997`
`md5`	`6cb8c1ca706d9d6b1afb3c3a0872f70a`
`md5`	`4a0d2acb96b8a5b95ae8175ecb560c4f`
`md5`	`66cd0ea0fbcecd96016782a63753c335`
`md5`	`7f07488381c1fc7c09215d6f77601fb6`
`md5`	`ed83c8e2dcc966748548be0e36fb90ce`
`md5`	`e99e6b583d77db4337e07af0ad0452dc`
`md5`	`2814a6b44c5c102032dd566408f99124`
`md5`	`927c94b401a7711cf5f6c910d9c46f52`
`md5`	`8f75b0c895b1854566ebe2ec592c6fa6`
`md5`	`f78073b1b2de009645a0254507b87a37`
`md5`	`7f7c78fb5d9fdee28996a3f12bd00fef`
`md5`	`3637a397b30237dfdef72a21eb542d33`
`md5`	`71ff62df6b65bbdb6144acc2fbb516ca`
`md5`	`2506fe932b2e3acf792f2582d0c302db`
`md5`	`e614b22e081429a22b31a5eb7fedcc21`
`md5`	`03eaabaf750bcf69d58f79098432f8a3`
`md5`	`07a155371aded5527e7bf38bf6445537`
`md5`	`44cda3592e15092bf5e2312f91e231d0`
`md5`	`56e4b76555c94000cb21a7571dae2715`
`md5`	`42301ee7b3dec6b09c5b693a212242d9`
`md5`	`36a52cda091a0d5b20a567f0015308b4`
`md5`	`4f287c6c35f36203168b9d02ac8da88a`
`md5`	`8b36239feabd0cf0fb526f94c411f67a`
`md5`	`6358d925c5393bf4f6347369c88a1280`
`md5`	`c68f8ee17c3e4e0c4ab82631c5df30fc`
`md5`	`5833bc744e0687e57be590e2685bddef`
`md5`	`f40a9023601154d7d61b349ab2945c97`
`md5`	`4fae00c0278abb3156d6e48c4af42b37`
`md5`	`0999410905d53bcb9e4bf5ae113330f4`
`md5`	`8061b9de6bbc0eadbc4000120678c544`
`md5`	`60fff4ae1f1007ec4f34a20af1255d68`
`md5`	`1d5622cc9901830f76672bff670ff565`
`md5`	`94cf899790945aca27e8bd195b86ecd6`
`md5`	`4becb7b02f39cfe4af8031a6f0464282`
`md5`	`8a4a51a2175b0935a5172536e6d27054`
`md5`	`846fc21208bba21d72f5bbabe3a4148a`
`md5`	`5c1ef3e67167dc9d4ad2af212f59fd4c`
`md5`	`03ab9195dcbd96fbe4e11917c50b57b6`
`md5`	`91803d9a3674d6739a60f51a9fbc8f32`
`md5`	`b4af619cdc21b9947f7ae58cb73e9175`
`md5`	`7c870d186057084254075870aebfb111`
`md5`	`82c4867ee2bd7460e36c38528cf8a6a4`
`md5`	`4851e59fa347df21ab856397b98f5490`
`md5`	`6f059281f864368d16c5bf49cafa9c51`
`md5`	`aa0406ac91d3a12e57f52ef82cb7d2e7`
`md5`	`ca2200de13490701a70a3193565bc691`
`md5`	`b521ee7d7e2089ab5c68debbb319ca91`
`md5`	`9734089f6eab3bf3d443755954cc785f`
`md5`	`997d9e2d14080c5d176b6bb414d88561`
`md5`	`396460e7459be6a8b1f7350de4c8d752`
`md5`	`1a86cd5437ab93e78a95683df51ad525`
`md5`	`12a0a4fad23eb3b9ee6a4e7baa6fa880`
`md5`	`cdb36dc4612f1ccc231fe54d8a3543d3`
`md5`	`7b2d0d3fc3ddbc01f042c5c72506ef0a`
`md5`	`8a61e38f6bb7a87ce40ce9c987dc4ce6`
`md5`	`ca33f9d7566d3578129c352bd5a93597`
`md5`	`0452d8379cae3490935f81a0dfea1a9e`
`md5`	`344c3f60bdccc98812b0dc5f9dc2f413`
`md5`	`9e5e96c4318ea5e8daab17ea456af069`
`md5`	`c6c511ba966328c9497c8aa9264fb733`
`md5`	`15d05dfa5cff0cfc86e5135155744385`
`md5`	`d0291a6d151395076d7fb7ca9b798125`
`md5`	`f58df2bfe9029301131370a318628026`
`md5`	`10403f08a869a83d5c8d81162b711453`
`md5`	`6ae62456341ad1a113597a50779c095a`
`md5`	`68635ad9d12f683071611bfd34c1ec34`
`md5`	`1852be15aa8dcf664291b3849bd348e4`
`md5`	`145d3ae9d1c6f1d4aa67e31fa32c32e9`
`md5`	`9bce9dae679419198574f4c9837085db`

Victims (49)

Claro Trigona

Discovery Date: 2024-03-30

Claro, a subsidiary of América Móvil, stands at the forefront of telecommunications innovatio...

South Star Electronics Trigona

Discovery Date: 2024-03-20

South Star Electronics Co., Ltd. is a prominent electronics company based in Dongguan City, C...

Indoarsip Trigona

Discovery Date: 2024-03-16

Indoarsip is a leading provider of archival solutions, dedicated to preserving and managing c...

Bwizer Trigona

Discovery Date: 2024-03-16

Bwizer is a prominent entity known for its dedication to advancing the fields of healthcare a...

Topa Partners Trigona

Discovery Date: 2024-03-16

Topa Electrical, led by Electrical Inspector Jeff Zhao, boasts a rich legacy of over a decade...

ATMCo Trigona

Discovery Date: 2024-03-15
Estimated Attack Date: 2024-02-21

ATMCo is a reputable tax management company based in Broken Arrow, Oklahoma. With a commitmen...

Dinamic Oil Trigona

Discovery Date: 2024-02-28

Established in 1970, Dinamic Oil S.p.A. is a renowned Italian manufacturer specializing in ho...

Hotel Avenida, Hostal Espoz y Mina, Hostal Arriazu, Pension Alemana Trigona

Discovery Date: 2024-02-28

Welcome to the Boutique Hospitality Collection, where every property offers a unique and unfo...

America Movil Trigona

Discovery Date: 2024-02-14
Estimated Attack Date: 2024-01-25

América Móvil, S.A.B. de C.V. ("América Móvil" or "the Company") stands as one of the foremos...

FALCO Electronics Trigona

Discovery Date: 2024-02-14
Estimated Attack Date: 2024-01-30

Founded in 1991, Falco Electronics is a prominent designer and manufacturer specializing in a...

Ausa Trigona

Discovery Date: 2024-01-31
Estimated Attack Date: 2024-01-11

AUSA, established in 1956 by four visionary individuals driven by a passion for engines, has evolved...

Genesis Motors Trigona

Discovery Date: 2024-01-31
Estimated Attack Date: 2024-01-29

Genesis Motors Isuzu UTE, situated in Lilydale, South East Melbourne, Victoria, stands as a p...

CMG Drainage Engineering Trigona

Discovery Date: 2024-01-31
Estimated Attack Date: 2024-01-30

Established in 1986, CMG Drainage Engineering stands as a prominent Civil Engineering consulting fir...

Daher Contracting Trigona

Discovery Date: 2024-01-31
Estimated Attack Date: 2024-01-30

Daher Contracting stands as the foremost excavation and site development contractor serving Okaloosa...

Lomma Crane & Rigging Trigona

Discovery Date: 2024-01-29
Estimated Attack Date: 2024-01-25

J.F. Lomma, Inc. is a distinguished provider of crane services, offering a wide range of equi...

Samuel Sekuritas Indonesia & Samuel Aset Manajemen Trigona

Discovery Date: 2024-01-18

PT Samuel Sekuritas Indonesia (SSI) is a prominent financial advisory company based in Jakarta, Indo...

Premier Facility Management Trigona

Discovery Date: 2024-01-18

Premier Facility Management (PFM) stands as a leader in sustainable green programs, offering customi...

Fertility North Trigona

Discovery Date: 2024-01-18

Fertility North, a leading fertility clinic, boasts a cohesive, multidisciplinary team of approximat...

Vision Plast Trigona

Discovery Date: 2024-01-18

Founded in 2006, Vision Plast Group stands as a prominent player in the automotive, industrial, buil...

Alconex Specialty Products Trigona

Discovery Date: 2023-10-13

N/A

FPZ Trigona

Discovery Date: 2023-10-12

N/A