Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_7df7747d28b6d2e4e9eff7cdb9b9a685

  • Size

    259KB

  • Sample

    250317-nlhbxsyvgs

  • MD5

    7df7747d28b6d2e4e9eff7cdb9b9a685

  • SHA1

    263ac5f22b3daaec6feee407985e68f9a73a3284

  • SHA256

    0ffa7cd4fedad863031dad1c98c941e6900a43146e914f292b75fe201bc41b02

  • SHA512

    1381b04daef4342c2f2032031064b5cf44c2dee7cc746052469098b734e14fd5778fe5b7fb06e4a073fcd79acaded3d9a35fcae871c5ddfc30c4f1048fec423f

  • SSDEEP

    6144:XNtJIZHTutDjIzebMsoM0xiXqVL5+IuwHpuXNjUl3w:jK+Dczebnd0AXqVd+IZwjUW

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_7df7747d28b6d2e4e9eff7cdb9b9a685

    • Size

      259KB

    • MD5

      7df7747d28b6d2e4e9eff7cdb9b9a685

    • SHA1

      263ac5f22b3daaec6feee407985e68f9a73a3284

    • SHA256

      0ffa7cd4fedad863031dad1c98c941e6900a43146e914f292b75fe201bc41b02

    • SHA512

      1381b04daef4342c2f2032031064b5cf44c2dee7cc746052469098b734e14fd5778fe5b7fb06e4a073fcd79acaded3d9a35fcae871c5ddfc30c4f1048fec423f

    • SSDEEP

      6144:XNtJIZHTutDjIzebMsoM0xiXqVL5+IuwHpuXNjUl3w:jK+Dczebnd0AXqVd+IZwjUW

MITRE ATT&CK Enterprise v15

Tasks