Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_027c0b0c1f62291ae125bde8efd8844a

  • Size

    257KB

  • Sample

    250121-gnvayazkap

  • MD5

    027c0b0c1f62291ae125bde8efd8844a

  • SHA1

    4aaf81a6f220aa0306641ac2d2152af72bdcfd2d

  • SHA256

    b4a07e3cdde2ceb9ea4a3e5eeb362cb2670791b4dfeb03a41c969321cde68a19

  • SHA512

    78d9cb491c72492668493d3c5434b81a8b554555394aaae4b139ee72f25550196c99a8b99f1850edcf6dd61e1de46efc381cac3762617ce823fd996640677b10

  • SSDEEP

    6144:wnhPrfhPgYxuaMVmaho0+tq/pTNfXwysBVe+xMXQyWIf8kPZ33yMuZixwU8:L8ptqrXwy2/MXQ/EnZnBuZfL

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_027c0b0c1f62291ae125bde8efd8844a

    • Size

      257KB

    • MD5

      027c0b0c1f62291ae125bde8efd8844a

    • SHA1

      4aaf81a6f220aa0306641ac2d2152af72bdcfd2d

    • SHA256

      b4a07e3cdde2ceb9ea4a3e5eeb362cb2670791b4dfeb03a41c969321cde68a19

    • SHA512

      78d9cb491c72492668493d3c5434b81a8b554555394aaae4b139ee72f25550196c99a8b99f1850edcf6dd61e1de46efc381cac3762617ce823fd996640677b10

    • SSDEEP

      6144:wnhPrfhPgYxuaMVmaho0+tq/pTNfXwysBVe+xMXQyWIf8kPZ33yMuZixwU8:L8ptqrXwy2/MXQ/EnZnBuZfL

MITRE ATT&CK Enterprise v15

Tasks