Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_79d9b1f1ba9fd094c5be826bf74ae72f

  • Size

    268KB

  • Sample

    250316-l9j5baysbx

  • MD5

    79d9b1f1ba9fd094c5be826bf74ae72f

  • SHA1

    e5258c0fe2c2304d302c6009f218b6ffd60b4832

  • SHA256

    dfc403bbd5b4664ed8214ad9b51ed5a184a5485022623ba12b6faf0dd8a1a023

  • SHA512

    fa50ba2cdd7dd3939f337fcdc4aa4c98c481394e5fd596cda5b34ec87d336d6a07f47950f92fc2786451e8e1ff29cdece677a29d62338906d0ea92672fba5f56

  • SSDEEP

    6144:MqQUFpbn2CkudG+zpMaS75RobQvmvD6EBryQ:eC91jMRl4eqGUr/

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_79d9b1f1ba9fd094c5be826bf74ae72f

    • Size

      268KB

    • MD5

      79d9b1f1ba9fd094c5be826bf74ae72f

    • SHA1

      e5258c0fe2c2304d302c6009f218b6ffd60b4832

    • SHA256

      dfc403bbd5b4664ed8214ad9b51ed5a184a5485022623ba12b6faf0dd8a1a023

    • SHA512

      fa50ba2cdd7dd3939f337fcdc4aa4c98c481394e5fd596cda5b34ec87d336d6a07f47950f92fc2786451e8e1ff29cdece677a29d62338906d0ea92672fba5f56

    • SSDEEP

      6144:MqQUFpbn2CkudG+zpMaS75RobQvmvD6EBryQ:eC91jMRl4eqGUr/

MITRE ATT&CK Enterprise v15

Tasks