Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a684d50a0da3ee52da611676fa2577f42ecf2eeeca14e648a41d44153bce185dN.exe

  • Size

    213KB

  • Sample

    250122-sx8qgasqay

  • MD5

    f49f675a2467b0694cc434d4e5997bc0

  • SHA1

    20fa6b56a20298fc38e609b6e91023ef42829fba

  • SHA256

    a684d50a0da3ee52da611676fa2577f42ecf2eeeca14e648a41d44153bce185d

  • SHA512

    a98f75fa151a6f994a7419872422e4b72fb6aba0a3b651bb4cba4544d6b9b1d1a00687f25d8bacae2e185e61f2d18a766eed909c4f227c388765934c4f6ac739

  • SSDEEP

    6144:oQfbXnEreyARNf+fIfvEEDi3EJ3FzbPotDy:3Xkej+f4VDOEVdbgt

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      a684d50a0da3ee52da611676fa2577f42ecf2eeeca14e648a41d44153bce185dN.exe

    • Size

      213KB

    • MD5

      f49f675a2467b0694cc434d4e5997bc0

    • SHA1

      20fa6b56a20298fc38e609b6e91023ef42829fba

    • SHA256

      a684d50a0da3ee52da611676fa2577f42ecf2eeeca14e648a41d44153bce185d

    • SHA512

      a98f75fa151a6f994a7419872422e4b72fb6aba0a3b651bb4cba4544d6b9b1d1a00687f25d8bacae2e185e61f2d18a766eed909c4f227c388765934c4f6ac739

    • SSDEEP

      6144:oQfbXnEreyARNf+fIfvEEDi3EJ3FzbPotDy:3Xkej+f4VDOEVdbgt

MITRE ATT&CK Enterprise v15

Tasks