Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_7098824221a15e0b063ebeaa20beed81

  • Size

    257KB

  • Sample

    250116-kbelhasmak

  • MD5

    7098824221a15e0b063ebeaa20beed81

  • SHA1

    3aa6dced25c9b562b60d6778c8cc29d8e00c3a33

  • SHA256

    2432ebc33011e407bae3b1139c4a446e557e1881ac42d402b6c49bd3af9ba4d3

  • SHA512

    d63e2826c4ca3bb1dc8c9042802b88832327756b3c7832ebf83832f6954ba1b344d7a301a7ed7720195703f35eaacd6c28992bd27c1ffacb1ec036a17904301c

  • SSDEEP

    6144:T6uOrfrPNnOepRJo1njv1DpIp3fFRuqBvrNlbsoAt:T6u6fDdnpRJopjmPFRDFrsoe

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_7098824221a15e0b063ebeaa20beed81

    • Size

      257KB

    • MD5

      7098824221a15e0b063ebeaa20beed81

    • SHA1

      3aa6dced25c9b562b60d6778c8cc29d8e00c3a33

    • SHA256

      2432ebc33011e407bae3b1139c4a446e557e1881ac42d402b6c49bd3af9ba4d3

    • SHA512

      d63e2826c4ca3bb1dc8c9042802b88832327756b3c7832ebf83832f6954ba1b344d7a301a7ed7720195703f35eaacd6c28992bd27c1ffacb1ec036a17904301c

    • SSDEEP

      6144:T6uOrfrPNnOepRJo1njv1DpIp3fFRuqBvrNlbsoAt:T6u6fDdnpRJopjmPFRDFrsoe

MITRE ATT&CK Enterprise v15

Tasks