Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f4eaee28b8a13f32646b0c88c70e6d5e_JaffaCakes118

  • Size

    244KB

  • Sample

    240925-cbxs3sxhjl

  • MD5

    f4eaee28b8a13f32646b0c88c70e6d5e

  • SHA1

    4b922d441500609725585db9618680e06c790051

  • SHA256

    189362acfd24254eec62f57d599a47431aba624f218ca8c6a0425c1828793bb0

  • SHA512

    529ba9645c8dd1a0e5ab99d8103ac9b8abad80bca9d1950cf9b52b5740cc679231181e63cffc7d3686e79ed3e3542867e20b9f7e716d54339b3c815105b54250

  • SSDEEP

    3072:TqXyDddDgd5FKseG2eJjHrbFK0DH0KDHbnnZKcWJa4KOlq+0UKPocCq34LR+2Q+I:Tq0bA5FleG2eS0D0KPsd0UKPoW41VSBv

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f4eaee28b8a13f32646b0c88c70e6d5e_JaffaCakes118

    • Size

      244KB

    • MD5

      f4eaee28b8a13f32646b0c88c70e6d5e

    • SHA1

      4b922d441500609725585db9618680e06c790051

    • SHA256

      189362acfd24254eec62f57d599a47431aba624f218ca8c6a0425c1828793bb0

    • SHA512

      529ba9645c8dd1a0e5ab99d8103ac9b8abad80bca9d1950cf9b52b5740cc679231181e63cffc7d3686e79ed3e3542867e20b9f7e716d54339b3c815105b54250

    • SSDEEP

      3072:TqXyDddDgd5FKseG2eJjHrbFK0DH0KDHbnnZKcWJa4KOlq+0UKPocCq34LR+2Q+I:Tq0bA5FleG2eS0D0KPsd0UKPoW41VSBv

MITRE ATT&CK Enterprise v15

Tasks