Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d0623aceb5f29422465b1de6cf3d7a78_JaffaCakes118

  • Size

    257KB

  • Sample

    241207-drq6xasrfw

  • MD5

    d0623aceb5f29422465b1de6cf3d7a78

  • SHA1

    237442cabfc82a4e8b536356434a288cf4244b13

  • SHA256

    fb04116036c2618128ec0391186d0fab90bd199ede405213bdcf0b289b6e6460

  • SHA512

    d49771f449ed0bf380fb38ea25737637008a66d07ca967828c692141e866de340c923d22b39a74a3722d5cf0f8774dca9ad230e1f53c93d1873e620ac1dd9b69

  • SSDEEP

    6144:M5tnApAq69lEd2CydkKKPJ5HXZ8NMkS978r1z+s6UPiLAwK:M7nApY+LjHhRits78r1V6AiLI

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d0623aceb5f29422465b1de6cf3d7a78_JaffaCakes118

    • Size

      257KB

    • MD5

      d0623aceb5f29422465b1de6cf3d7a78

    • SHA1

      237442cabfc82a4e8b536356434a288cf4244b13

    • SHA256

      fb04116036c2618128ec0391186d0fab90bd199ede405213bdcf0b289b6e6460

    • SHA512

      d49771f449ed0bf380fb38ea25737637008a66d07ca967828c692141e866de340c923d22b39a74a3722d5cf0f8774dca9ad230e1f53c93d1873e620ac1dd9b69

    • SSDEEP

      6144:M5tnApAq69lEd2CydkKKPJ5HXZ8NMkS978r1z+s6UPiLAwK:M7nApY+LjHhRits78r1V6AiLI

MITRE ATT&CK Enterprise v15

Tasks