Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_7ae46c57ab0c2f3ba45f9ffce40694bd

  • Size

    249KB

  • Sample

    250316-tqq3hsxry3

  • MD5

    7ae46c57ab0c2f3ba45f9ffce40694bd

  • SHA1

    7e1f2b2b05266a82db96c3ca61f66cb84176bbf8

  • SHA256

    33d392a0688b647bb11ebccd07641b5997dd748d2bf23919f0feaa00a8182665

  • SHA512

    4c93086927860dd8dce7e8fa96dfe6528b64cea2208f3ca3ab276929b8252400b7d76aa47ba99316c92013659ad30704330fda1db06a5eeb241c539ad8fd9376

  • SSDEEP

    6144:5ApjlcK3jvdByYKvXMlDLMjwuGR0Ournll0dXbpFm9:UjlJ3r3i8hLMj9GyxDlQXFFO

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_7ae46c57ab0c2f3ba45f9ffce40694bd

    • Size

      249KB

    • MD5

      7ae46c57ab0c2f3ba45f9ffce40694bd

    • SHA1

      7e1f2b2b05266a82db96c3ca61f66cb84176bbf8

    • SHA256

      33d392a0688b647bb11ebccd07641b5997dd748d2bf23919f0feaa00a8182665

    • SHA512

      4c93086927860dd8dce7e8fa96dfe6528b64cea2208f3ca3ab276929b8252400b7d76aa47ba99316c92013659ad30704330fda1db06a5eeb241c539ad8fd9376

    • SSDEEP

      6144:5ApjlcK3jvdByYKvXMlDLMjwuGR0Ournll0dXbpFm9:UjlJ3r3i8hLMj9GyxDlQXFFO

MITRE ATT&CK Enterprise v15

Tasks