Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e592235d9285da45dbca563eb48fc60d_JaffaCakes118

  • Size

    355KB

  • Sample

    241212-kkz9kaymbv

  • MD5

    e592235d9285da45dbca563eb48fc60d

  • SHA1

    d07af38934b488281dbfe902fb5b592c1e66dedd

  • SHA256

    806bfab45d57f4689f495db991533baeb37b046a08195882546c2aa9aa7d271b

  • SHA512

    fb934213210388c08c60b28eac289eb8a6f1950428502546f1f54f1a54dbb90526c4930da05fb1c9c7dd63625b46065ec626e21db24c8490e69fba9ed5ef7c1d

  • SSDEEP

    6144:3ssGHX2btub+F8U2+sklOCz/yq+cqoGU0lzAA7whWtxIT951Pal4ySQw:8s7tY+GU2JCh+4G/lzzM4txkRMw

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      e592235d9285da45dbca563eb48fc60d_JaffaCakes118

    • Size

      355KB

    • MD5

      e592235d9285da45dbca563eb48fc60d

    • SHA1

      d07af38934b488281dbfe902fb5b592c1e66dedd

    • SHA256

      806bfab45d57f4689f495db991533baeb37b046a08195882546c2aa9aa7d271b

    • SHA512

      fb934213210388c08c60b28eac289eb8a6f1950428502546f1f54f1a54dbb90526c4930da05fb1c9c7dd63625b46065ec626e21db24c8490e69fba9ed5ef7c1d

    • SSDEEP

      6144:3ssGHX2btub+F8U2+sklOCz/yq+cqoGU0lzAA7whWtxIT951Pal4ySQw:8s7tY+GU2JCh+4G/lzzM4txkRMw

MITRE ATT&CK Enterprise v15

Tasks