Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    302da867ea2e582c2b28f1c29e6e98db009b300079d1af6deac5b4931e20e96f

  • Size

    272KB

  • Sample

    250317-234hdazwhw

  • MD5

    70480b615e6973c94971faadce2394b1

  • SHA1

    fdcfb9387e064c715cf18704847342fb93120066

  • SHA256

    302da867ea2e582c2b28f1c29e6e98db009b300079d1af6deac5b4931e20e96f

  • SHA512

    0d2fa0fa70c07a1becfb41db1972b4f6641dc407dff43ab3e38768861c32a75b31c0bf0eff8e13ae5ca6390992d41ce5cd841496c550f1f1bc9e28ba63bec7e9

  • SSDEEP

    6144:4AA0qfdcpUwtyla3MZ9Ic/aw0kkv15WlEbZteHr8zTIw:4rbFcpUIylV9IkDkv14CneHgAw

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      302da867ea2e582c2b28f1c29e6e98db009b300079d1af6deac5b4931e20e96f

    • Size

      272KB

    • MD5

      70480b615e6973c94971faadce2394b1

    • SHA1

      fdcfb9387e064c715cf18704847342fb93120066

    • SHA256

      302da867ea2e582c2b28f1c29e6e98db009b300079d1af6deac5b4931e20e96f

    • SHA512

      0d2fa0fa70c07a1becfb41db1972b4f6641dc407dff43ab3e38768861c32a75b31c0bf0eff8e13ae5ca6390992d41ce5cd841496c550f1f1bc9e28ba63bec7e9

    • SSDEEP

      6144:4AA0qfdcpUwtyla3MZ9Ic/aw0kkv15WlEbZteHr8zTIw:4rbFcpUIylV9IkDkv14CneHgAw

MITRE ATT&CK Enterprise v15

Tasks