Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

14/03/2025, 20:26

250314-y7wrjsyvhz 10

14/03/2025, 20:23

250314-y54z5ssjt4 10

General

  • Target

    JaffaCakes118_756c7e7d6b284b1642a6ad167c93345f

  • Size

    316KB

  • Sample

    250314-y54z5ssjt4

  • MD5

    756c7e7d6b284b1642a6ad167c93345f

  • SHA1

    9c0f9a961f83f2ca33c0fe20bc6a1701a584f2fc

  • SHA256

    1d70339f0adbce6221bbfae582d6c9c827cc0ba4ef1512eebae0009ffdd69c32

  • SHA512

    7f87219687088c1eba251fe19f143038c55619f208f87c9fa42613223c31c902212b634dea478e1bc029c53a906917333c60c490914370486a893439ba2d47fc

  • SSDEEP

    6144:FP0AmFE3rXlFuwvmuayPEMPPx7AduK5JJcvHGiUHnXlY+8YVUA4fp7:d0BFQlFuwyMPJ7WBJJcv9ia+BVyJ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_756c7e7d6b284b1642a6ad167c93345f

    • Size

      316KB

    • MD5

      756c7e7d6b284b1642a6ad167c93345f

    • SHA1

      9c0f9a961f83f2ca33c0fe20bc6a1701a584f2fc

    • SHA256

      1d70339f0adbce6221bbfae582d6c9c827cc0ba4ef1512eebae0009ffdd69c32

    • SHA512

      7f87219687088c1eba251fe19f143038c55619f208f87c9fa42613223c31c902212b634dea478e1bc029c53a906917333c60c490914370486a893439ba2d47fc

    • SSDEEP

      6144:FP0AmFE3rXlFuwvmuayPEMPPx7AduK5JJcvHGiUHnXlY+8YVUA4fp7:d0BFQlFuwyMPJ7WBJJcv9ia+BVyJ

MITRE ATT&CK Enterprise v15

Tasks