Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_7313ad117b6372e8deabb048a0d4d64c

  • Size

    268KB

  • Sample

    250314-d1dxyatrs3

  • MD5

    7313ad117b6372e8deabb048a0d4d64c

  • SHA1

    aa5e5a9db4286b85fdc5491678658d38f7efa28f

  • SHA256

    819b7082fa6dd2898ec304cf634e7e5629338851aa96e7922b6fffa01832ddda

  • SHA512

    e0c471e860dafa7e632b1ceb77b5af33b6c297b84a90bce225fbea80303dd2790bed163efc9b76c613cea70f77ca8f688a7ee2a186f0e8b8c1649072bf3042b5

  • SSDEEP

    6144:6AIx3gWmnrF7uITd6lnQfZZLdZR6Za64oqcu3EAlghlcN:5I2/rF7uITdxfZVd2Fs0nh4

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_7313ad117b6372e8deabb048a0d4d64c

    • Size

      268KB

    • MD5

      7313ad117b6372e8deabb048a0d4d64c

    • SHA1

      aa5e5a9db4286b85fdc5491678658d38f7efa28f

    • SHA256

      819b7082fa6dd2898ec304cf634e7e5629338851aa96e7922b6fffa01832ddda

    • SHA512

      e0c471e860dafa7e632b1ceb77b5af33b6c297b84a90bce225fbea80303dd2790bed163efc9b76c613cea70f77ca8f688a7ee2a186f0e8b8c1649072bf3042b5

    • SSDEEP

      6144:6AIx3gWmnrF7uITd6lnQfZZLdZR6Za64oqcu3EAlghlcN:5I2/rF7uITdxfZVd2Fs0nh4

MITRE ATT&CK Enterprise v15

Tasks