Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_74c001c6db26de1a48054da94213ca38

  • Size

    257KB

  • Sample

    250314-stnwwswqx3

  • MD5

    74c001c6db26de1a48054da94213ca38

  • SHA1

    2b3369f6c7f2a5e66cac34ab5e90ba4bc86c6454

  • SHA256

    02cc1da188f6285fb1d64a280e8fc7004a3004813272f647a3fca9014b0ea26d

  • SHA512

    9ee40f365ff7e67ccd69aa362cfafb966ba73fbfb9ee7e961e7602f79558c8175051ceadc7519dd56aebaec642f62e71cdd5616e745a3c30ee13df2baa46745f

  • SSDEEP

    3072:OicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:bXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_74c001c6db26de1a48054da94213ca38

    • Size

      257KB

    • MD5

      74c001c6db26de1a48054da94213ca38

    • SHA1

      2b3369f6c7f2a5e66cac34ab5e90ba4bc86c6454

    • SHA256

      02cc1da188f6285fb1d64a280e8fc7004a3004813272f647a3fca9014b0ea26d

    • SHA512

      9ee40f365ff7e67ccd69aa362cfafb966ba73fbfb9ee7e961e7602f79558c8175051ceadc7519dd56aebaec642f62e71cdd5616e745a3c30ee13df2baa46745f

    • SSDEEP

      3072:OicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:bXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks