Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_78244534336d0e5bc47020fe90875c13

  • Size

    291KB

  • Sample

    250315-2cyjfavxez

  • MD5

    78244534336d0e5bc47020fe90875c13

  • SHA1

    cbb8bc160e346f99adf0ebb1235f7ffa1988dfb2

  • SHA256

    eaa2e4dc15fc8d483c5a05c45ee40f88e06e61b0e9abfbfb11ce62ec69d952fb

  • SHA512

    5566a454e34490f11fdb4f5d0a9fbf4159ca03c8b6e10122536c55d0d5c5fef59d662361ac993d478b15f97dd57c5d161ab00ea5ceab84c92b8cea2bac26c475

  • SSDEEP

    6144:8fXSq43yl0YKkM/gxo7O3T5LpanOV9ILrDSUWuZfX2i:wwyy8M/g67ulLWomLrDSUvZvl

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_78244534336d0e5bc47020fe90875c13

    • Size

      291KB

    • MD5

      78244534336d0e5bc47020fe90875c13

    • SHA1

      cbb8bc160e346f99adf0ebb1235f7ffa1988dfb2

    • SHA256

      eaa2e4dc15fc8d483c5a05c45ee40f88e06e61b0e9abfbfb11ce62ec69d952fb

    • SHA512

      5566a454e34490f11fdb4f5d0a9fbf4159ca03c8b6e10122536c55d0d5c5fef59d662361ac993d478b15f97dd57c5d161ab00ea5ceab84c92b8cea2bac26c475

    • SSDEEP

      6144:8fXSq43yl0YKkM/gxo7O3T5LpanOV9ILrDSUWuZfX2i:wwyy8M/g67ulLWomLrDSUvZvl

MITRE ATT&CK Enterprise v15

Tasks