Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_0595ac991ae3ac53cdfb8c0a71c33177

  • Size

    264KB

  • Sample

    250121-syavtszrct

  • MD5

    0595ac991ae3ac53cdfb8c0a71c33177

  • SHA1

    6141f0320393a6e072018428950a71639521b15f

  • SHA256

    827e0fb90e800673223f5c73d572c349f85d733e5aba15f0abd892697771914d

  • SHA512

    bf9eaf91a3c59d261b008101f8bf0f7701a387f2bfeaf21bf5b9aa8b0cab1d4ebc3f3ca2ce07bca4af0ca92df779a1c6db9cc675b8fc17d075dccb2e5271a4ef

  • SSDEEP

    6144:4kWSScfUV7fNv2IJgX6uCbT4BAHaTwlWSJm2voQBv1AMd:pWSS6UV7fNODqzb06HazSY25Bv

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0595ac991ae3ac53cdfb8c0a71c33177

    • Size

      264KB

    • MD5

      0595ac991ae3ac53cdfb8c0a71c33177

    • SHA1

      6141f0320393a6e072018428950a71639521b15f

    • SHA256

      827e0fb90e800673223f5c73d572c349f85d733e5aba15f0abd892697771914d

    • SHA512

      bf9eaf91a3c59d261b008101f8bf0f7701a387f2bfeaf21bf5b9aa8b0cab1d4ebc3f3ca2ce07bca4af0ca92df779a1c6db9cc675b8fc17d075dccb2e5271a4ef

    • SSDEEP

      6144:4kWSScfUV7fNv2IJgX6uCbT4BAHaTwlWSJm2voQBv1AMd:pWSS6UV7fNODqzb06HazSY25Bv

MITRE ATT&CK Enterprise v15

Tasks