Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_78bd98810d5d3ddfc9ebd5e43b4d1111

  • Size

    260KB

  • Sample

    250316-eb24xatq12

  • MD5

    78bd98810d5d3ddfc9ebd5e43b4d1111

  • SHA1

    5b10b3e39a8c95698bd6ba520366a15a3c3ec671

  • SHA256

    17f6dd4d0aab13d12a87728cd988e1f49b5ec1efc60fb984a7d10b747cb84847

  • SHA512

    0852bdf772991ef444a1e67da204246a8c1030a1789c4ddbbcff33a86df55e564b42127700ecc581dddf7cff9dfd09750bfa5ab3d2ea5a6d22727fe7f8e78aee

  • SSDEEP

    6144:dDppAKk660Q+W/8x26YdTVw2zg6I4Y99uqr0keM9bLl0C:XFk30PWE6TVwR6RY99hXdLl/

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_78bd98810d5d3ddfc9ebd5e43b4d1111

    • Size

      260KB

    • MD5

      78bd98810d5d3ddfc9ebd5e43b4d1111

    • SHA1

      5b10b3e39a8c95698bd6ba520366a15a3c3ec671

    • SHA256

      17f6dd4d0aab13d12a87728cd988e1f49b5ec1efc60fb984a7d10b747cb84847

    • SHA512

      0852bdf772991ef444a1e67da204246a8c1030a1789c4ddbbcff33a86df55e564b42127700ecc581dddf7cff9dfd09750bfa5ab3d2ea5a6d22727fe7f8e78aee

    • SSDEEP

      6144:dDppAKk660Q+W/8x26YdTVw2zg6I4Y99uqr0keM9bLl0C:XFk30PWE6TVwR6RY99hXdLl/

MITRE ATT&CK Enterprise v15

Tasks