Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_758c39a43bdd1fae2880819bfe9a159c

  • Size

    243KB

  • Sample

    250315-hxbevsxtes

  • MD5

    758c39a43bdd1fae2880819bfe9a159c

  • SHA1

    94cd918b64a451955e8995c31d37d8be47f399e6

  • SHA256

    2189d2ab05167b8c6ff4b4be5eb944f037f75168ca666632971a0801584655a8

  • SHA512

    19eaef8e73f63df718baf833b27387f544560a9e53a19e04e5758eb0f22c06d50ec87e135d783af05bbef3ab5684c47ad6c1dd5a5cb2d51fdfb9e9da643b8f6f

  • SSDEEP

    3072:dpUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:dpUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_758c39a43bdd1fae2880819bfe9a159c

    • Size

      243KB

    • MD5

      758c39a43bdd1fae2880819bfe9a159c

    • SHA1

      94cd918b64a451955e8995c31d37d8be47f399e6

    • SHA256

      2189d2ab05167b8c6ff4b4be5eb944f037f75168ca666632971a0801584655a8

    • SHA512

      19eaef8e73f63df718baf833b27387f544560a9e53a19e04e5758eb0f22c06d50ec87e135d783af05bbef3ab5684c47ad6c1dd5a5cb2d51fdfb9e9da643b8f6f

    • SSDEEP

      3072:dpUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:dpUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

MITRE ATT&CK Enterprise v15

Tasks