Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_76b8b247b452dd486c8f70fe026325ea

  • Size

    278KB

  • Sample

    250315-revv8aypt2

  • MD5

    76b8b247b452dd486c8f70fe026325ea

  • SHA1

    220463ff0fa5c293230e6ffaa7e166da22de19d2

  • SHA256

    68ac86f4d8ed5d7f0e857fa3a97e37d2a6f826961bf773a6a269eeb4e156d9eb

  • SHA512

    399b96d8ae4d6012ee271ca5000a798f5435f577d0d922bf89abc667ac9d62bab74f618834c3bd30b5b20753dac32d647895bfd78a56b503d8f6b57f147c61d9

  • SSDEEP

    6144:Iw8yL7ppV+WJG6de5dAqkNLBeYClpKzkc4qkeBACbx8YGLcRf:Iw/t+AMlkN1eYCDckc4jXgSYGI

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_76b8b247b452dd486c8f70fe026325ea

    • Size

      278KB

    • MD5

      76b8b247b452dd486c8f70fe026325ea

    • SHA1

      220463ff0fa5c293230e6ffaa7e166da22de19d2

    • SHA256

      68ac86f4d8ed5d7f0e857fa3a97e37d2a6f826961bf773a6a269eeb4e156d9eb

    • SHA512

      399b96d8ae4d6012ee271ca5000a798f5435f577d0d922bf89abc667ac9d62bab74f618834c3bd30b5b20753dac32d647895bfd78a56b503d8f6b57f147c61d9

    • SSDEEP

      6144:Iw8yL7ppV+WJG6de5dAqkNLBeYClpKzkc4qkeBACbx8YGLcRf:Iw/t+AMlkN1eYCDckc4jXgSYGI

MITRE ATT&CK Enterprise v15

Tasks