Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_14baa67c1ee9fd89024f1064af1c4a42

  • Size

    245KB

  • Sample

    250123-hqavraxrc1

  • MD5

    14baa67c1ee9fd89024f1064af1c4a42

  • SHA1

    4536b395d5f91635887350cc9683eb655a8f3106

  • SHA256

    c142fd197a3a870e401c92d012904d7f8479c5cc993aaa0d34e641c8a5de4bb1

  • SHA512

    65a4dbfdbeb66288ad081ecc26e804e7fcdd1ceae1909bdb5b7246dfaefe318bade12040dd2e6a136818546d790043824c20e9af01f60a4dd8671aa4145aa612

  • SSDEEP

    6144:QBCb2cOL7SLMOQi9gvjVNQQjIwfQqsDbxRA0U:QBChWIOvjV61LA0U

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_14baa67c1ee9fd89024f1064af1c4a42

    • Size

      245KB

    • MD5

      14baa67c1ee9fd89024f1064af1c4a42

    • SHA1

      4536b395d5f91635887350cc9683eb655a8f3106

    • SHA256

      c142fd197a3a870e401c92d012904d7f8479c5cc993aaa0d34e641c8a5de4bb1

    • SHA512

      65a4dbfdbeb66288ad081ecc26e804e7fcdd1ceae1909bdb5b7246dfaefe318bade12040dd2e6a136818546d790043824c20e9af01f60a4dd8671aa4145aa612

    • SSDEEP

      6144:QBCb2cOL7SLMOQi9gvjVNQQjIwfQqsDbxRA0U:QBChWIOvjV61LA0U

MITRE ATT&CK Enterprise v15

Tasks