Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    eb8b48eb3d77845cc0167b9d3f9c1eb4_JaffaCakes118

  • Size

    283KB

  • Sample

    240919-rz6hfstcrc

  • MD5

    eb8b48eb3d77845cc0167b9d3f9c1eb4

  • SHA1

    620ac0bce861ce41b5bff5184be858407a0a840c

  • SHA256

    99d746932a6c128139c7eb3e7beed66a9c8be3c02ab966362a7d1d59d395e2d8

  • SHA512

    8c8f0577726cdeece314b50d63568142ee0ba1bd810bf7c07009bd36246613e47efa2260a1d88f1aada09066de01535c241d12188317dc986d47284b3c35decb

  • SSDEEP

    6144:zAR2yMc7Aogde44yCfoEyah2u1ZarBqBtgcmnhHQ48nAUNDt:UL+3XFCfn18BytgcWhHyrR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      eb8b48eb3d77845cc0167b9d3f9c1eb4_JaffaCakes118

    • Size

      283KB

    • MD5

      eb8b48eb3d77845cc0167b9d3f9c1eb4

    • SHA1

      620ac0bce861ce41b5bff5184be858407a0a840c

    • SHA256

      99d746932a6c128139c7eb3e7beed66a9c8be3c02ab966362a7d1d59d395e2d8

    • SHA512

      8c8f0577726cdeece314b50d63568142ee0ba1bd810bf7c07009bd36246613e47efa2260a1d88f1aada09066de01535c241d12188317dc986d47284b3c35decb

    • SSDEEP

      6144:zAR2yMc7Aogde44yCfoEyah2u1ZarBqBtgcmnhHQ48nAUNDt:UL+3XFCfn18BytgcWhHyrR

MITRE ATT&CK Enterprise v15

Tasks