Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    f3beee9315d580ba987b61f06826a81a_JaffaCakes118

  • Size

    269KB

  • Sample

    241215-ndmlnstqhp

  • MD5

    f3beee9315d580ba987b61f06826a81a

  • SHA1

    0c195f4af5cac0e990092942b196df5c8e38ac14

  • SHA256

    e763bd5315ceee16b655774fa5a0c6afa89a8d05a8c81f8531718d3605e11994

  • SHA512

    33c1daad59963a9fc406f4c1841cc4451b7828c3420150b9029cfcd557beed772bc89374a7631d9dc2c3d4f1588aa43667724ea47218bf81a849eddd0c2c8129

  • SSDEEP

    6144:rJ3oS2G8MnHFaKrU3SZaHkTqITycShQHeQFQssNLgRwYE7z:re99EQK9Zek6QPsGC7

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f3beee9315d580ba987b61f06826a81a_JaffaCakes118

    • Size

      269KB

    • MD5

      f3beee9315d580ba987b61f06826a81a

    • SHA1

      0c195f4af5cac0e990092942b196df5c8e38ac14

    • SHA256

      e763bd5315ceee16b655774fa5a0c6afa89a8d05a8c81f8531718d3605e11994

    • SHA512

      33c1daad59963a9fc406f4c1841cc4451b7828c3420150b9029cfcd557beed772bc89374a7631d9dc2c3d4f1588aa43667724ea47218bf81a849eddd0c2c8129

    • SSDEEP

      6144:rJ3oS2G8MnHFaKrU3SZaHkTqITycShQHeQFQssNLgRwYE7z:re99EQK9Zek6QPsGC7

MITRE ATT&CK Enterprise v15

Tasks