Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_72fd9ce404912f347f8bf15ccd46544e

  • Size

    286KB

  • Sample

    250314-dfqe8stkx6

  • MD5

    72fd9ce404912f347f8bf15ccd46544e

  • SHA1

    b2e94b53d3f6a7dc4119e70c2f6c8bd945b3663a

  • SHA256

    06b98ae6e0f0df4e0e186c7c1c8d3ec4bc19fe245160af674794d05d73a28a39

  • SHA512

    c222a420291ee95a67ac406afc8f85028da7ecb054bb0f6c490bb2f00c23dbf3ebec35d08bfec840d24c5683ebe68e3ef4ae9e7b0d7f80e489c05e2f040970b6

  • SSDEEP

    6144:kzdQANkh/dV/JxzVCn/GdqN/fYFDVAFCacgh:0WKkhvH5QtN/ACNPh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_72fd9ce404912f347f8bf15ccd46544e

    • Size

      286KB

    • MD5

      72fd9ce404912f347f8bf15ccd46544e

    • SHA1

      b2e94b53d3f6a7dc4119e70c2f6c8bd945b3663a

    • SHA256

      06b98ae6e0f0df4e0e186c7c1c8d3ec4bc19fe245160af674794d05d73a28a39

    • SHA512

      c222a420291ee95a67ac406afc8f85028da7ecb054bb0f6c490bb2f00c23dbf3ebec35d08bfec840d24c5683ebe68e3ef4ae9e7b0d7f80e489c05e2f040970b6

    • SSDEEP

      6144:kzdQANkh/dV/JxzVCn/GdqN/fYFDVAFCacgh:0WKkhvH5QtN/ACNPh

MITRE ATT&CK Enterprise v15

Tasks