Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fa3b1b2bcdcd9a3d32ddc5d05418b3c8_JaffaCakes118

  • Size

    292KB

  • Sample

    241218-fvd2vswkdq

  • MD5

    fa3b1b2bcdcd9a3d32ddc5d05418b3c8

  • SHA1

    67c4454d7b725cd46ecabd1492088a971d085a9e

  • SHA256

    eacd45f78b78a77fcaeab6bca0d5e2f0d341267ae3eee933f20a7610bda83850

  • SHA512

    7a72611adca26d4b7ae16f8615f0caaccf091fa2d3f817081a7bfa93e3c4044d97da87986178f6ac90318e30d5677769e50dadc36d74b976c661471f633f1680

  • SSDEEP

    6144:9CVjpKGA0w2szyRb1bVeNM8UYZCXJU5ePppJfGf840pD6UswRXGBinVcC:9erA2GdUYZmU5cDE8rpDmwRXGicC

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      fa3b1b2bcdcd9a3d32ddc5d05418b3c8_JaffaCakes118

    • Size

      292KB

    • MD5

      fa3b1b2bcdcd9a3d32ddc5d05418b3c8

    • SHA1

      67c4454d7b725cd46ecabd1492088a971d085a9e

    • SHA256

      eacd45f78b78a77fcaeab6bca0d5e2f0d341267ae3eee933f20a7610bda83850

    • SHA512

      7a72611adca26d4b7ae16f8615f0caaccf091fa2d3f817081a7bfa93e3c4044d97da87986178f6ac90318e30d5677769e50dadc36d74b976c661471f633f1680

    • SSDEEP

      6144:9CVjpKGA0w2szyRb1bVeNM8UYZCXJU5ePppJfGf840pD6UswRXGBinVcC:9erA2GdUYZmU5cDE8rpDmwRXGicC

MITRE ATT&CK Enterprise v15

Tasks