Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ebafe06464c9041495c988c3dee0481a_JaffaCakes118

  • Size

    275KB

  • Sample

    241213-qkfsta1ndn

  • MD5

    ebafe06464c9041495c988c3dee0481a

  • SHA1

    5abf2cee96ea2049a6c47573e437b6f6486fdc1f

  • SHA256

    722a53ac4e7b5c4790e4cffb9f0cba7d59f0ff4fcb20692678b9e765a5deef96

  • SHA512

    36db3ca906141069a76aeaa1878c0aa14a2643af7dabeb84da34fa1e415b4c20b8f1e2fa7d9629191379e86ff61d39f831b86d8765a76ac7862c4c57e9725f8f

  • SSDEEP

    6144:kN/HLlhG/8jNQMyTfyZ1wafKa7Rs7PuJK6:kNpdNBEeK43

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      ebafe06464c9041495c988c3dee0481a_JaffaCakes118

    • Size

      275KB

    • MD5

      ebafe06464c9041495c988c3dee0481a

    • SHA1

      5abf2cee96ea2049a6c47573e437b6f6486fdc1f

    • SHA256

      722a53ac4e7b5c4790e4cffb9f0cba7d59f0ff4fcb20692678b9e765a5deef96

    • SHA512

      36db3ca906141069a76aeaa1878c0aa14a2643af7dabeb84da34fa1e415b4c20b8f1e2fa7d9629191379e86ff61d39f831b86d8765a76ac7862c4c57e9725f8f

    • SSDEEP

      6144:kN/HLlhG/8jNQMyTfyZ1wafKa7Rs7PuJK6:kNpdNBEeK43

MITRE ATT&CK Enterprise v15

Tasks