Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_78248ed3375912039fc73bda172b6013

  • Size

    257KB

  • Sample

    250315-2c8dmsvxft

  • MD5

    78248ed3375912039fc73bda172b6013

  • SHA1

    143fdfc0c7ec0006f3c3970467f0305c69402ddf

  • SHA256

    07c36f919eb8082d3368a5aa7476fb26a73d86eb284be2c06dd6af0f70ff031b

  • SHA512

    b9f741968483fb7d908804a29e3b6da6f9bb057d7e51c9cb0f71822d0f9e71efed4375a9b2fb9fb77b3a1b0778ea54334b9f17af624f0aedd9e42b1179f3830d

  • SSDEEP

    3072:gicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:9XNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_78248ed3375912039fc73bda172b6013

    • Size

      257KB

    • MD5

      78248ed3375912039fc73bda172b6013

    • SHA1

      143fdfc0c7ec0006f3c3970467f0305c69402ddf

    • SHA256

      07c36f919eb8082d3368a5aa7476fb26a73d86eb284be2c06dd6af0f70ff031b

    • SHA512

      b9f741968483fb7d908804a29e3b6da6f9bb057d7e51c9cb0f71822d0f9e71efed4375a9b2fb9fb77b3a1b0778ea54334b9f17af624f0aedd9e42b1179f3830d

    • SSDEEP

      3072:gicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:9XNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks