Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d260d6e16cbce7c33b972731975f37df_JaffaCakes118

  • Size

    255KB

  • Sample

    241207-pbxjjaxlbm

  • MD5

    d260d6e16cbce7c33b972731975f37df

  • SHA1

    6d9d388fac06c38edb9449e3f64b9ca53a998c4c

  • SHA256

    ea687bc2472f5f9a80103358a378de6c5264f0948334d8c9e4d2c4cee25be7e4

  • SHA512

    230c50790070456280398d236d8692f4bb4268988148715fcfb4cd9c90a9c25b360f3bbce4404f8ef6bd5ddc98ec9508b73839cc518873dbb0bf4d205c358d83

  • SSDEEP

    6144:qNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:qNRdpgdRRoTCD4ijpoix

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d260d6e16cbce7c33b972731975f37df_JaffaCakes118

    • Size

      255KB

    • MD5

      d260d6e16cbce7c33b972731975f37df

    • SHA1

      6d9d388fac06c38edb9449e3f64b9ca53a998c4c

    • SHA256

      ea687bc2472f5f9a80103358a378de6c5264f0948334d8c9e4d2c4cee25be7e4

    • SHA512

      230c50790070456280398d236d8692f4bb4268988148715fcfb4cd9c90a9c25b360f3bbce4404f8ef6bd5ddc98ec9508b73839cc518873dbb0bf4d205c358d83

    • SSDEEP

      6144:qNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:qNRdpgdRRoTCD4ijpoix

MITRE ATT&CK Enterprise v15

Tasks