Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_799ac3fcdfdceebe536ecd97f6fe09eb

  • Size

    309KB

  • Sample

    250316-kpyarswydt

  • MD5

    799ac3fcdfdceebe536ecd97f6fe09eb

  • SHA1

    508ca51a3b21625538020719adf46c277f17cb26

  • SHA256

    9fd3ee0b6ed291d076b91c31bad0ca62af04cb5639f98321832044409287f3bd

  • SHA512

    602f2bd78dfd4004f29963390626d17e2b5902f18916769d065ce08afd14ff413ee8ae61ea9f44549801e10f57cda93f4b401167d497c6f1fb093e7f81b78c57

  • SSDEEP

    6144:/VPN7wQ8P9sUeNE69gMG01kr5cG3/fbYKzeNsxB7SWz:/VPy3FsU/fp01krf/zXeSf7Fz

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_799ac3fcdfdceebe536ecd97f6fe09eb

    • Size

      309KB

    • MD5

      799ac3fcdfdceebe536ecd97f6fe09eb

    • SHA1

      508ca51a3b21625538020719adf46c277f17cb26

    • SHA256

      9fd3ee0b6ed291d076b91c31bad0ca62af04cb5639f98321832044409287f3bd

    • SHA512

      602f2bd78dfd4004f29963390626d17e2b5902f18916769d065ce08afd14ff413ee8ae61ea9f44549801e10f57cda93f4b401167d497c6f1fb093e7f81b78c57

    • SSDEEP

      6144:/VPN7wQ8P9sUeNE69gMG01kr5cG3/fbYKzeNsxB7SWz:/VPy3FsU/fp01krf/zXeSf7Fz

MITRE ATT&CK Enterprise v15

Tasks