Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_7e98a63bf470fcbe0278e2df8e0e0ac3

  • Size

    266KB

  • Sample

    250317-tzbzyst1gy

  • MD5

    7e98a63bf470fcbe0278e2df8e0e0ac3

  • SHA1

    033798933e9e07e390f9e623b68756b3886d64bd

  • SHA256

    39caedca88ef13d7697eb1b1bf84210d4c9088e602810fa3ac2e0c2dc642491f

  • SHA512

    9955a914ea461747d0d3d6bf3454352ba1a4c4e4b035c96f2e461750f22c3e5c672910a28531ce18acab5bc6826cae349fcccc06a9bcd9cb540e48d6f42f8ec7

  • SSDEEP

    6144:EXtW3PhCyc/BAnkAsgtv0ogX2475K+pQ9yf2+GMHxbnuhKeibq3OM:EX4x8ekMvVgX2Q5ZpQ9+371uhM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_7e98a63bf470fcbe0278e2df8e0e0ac3

    • Size

      266KB

    • MD5

      7e98a63bf470fcbe0278e2df8e0e0ac3

    • SHA1

      033798933e9e07e390f9e623b68756b3886d64bd

    • SHA256

      39caedca88ef13d7697eb1b1bf84210d4c9088e602810fa3ac2e0c2dc642491f

    • SHA512

      9955a914ea461747d0d3d6bf3454352ba1a4c4e4b035c96f2e461750f22c3e5c672910a28531ce18acab5bc6826cae349fcccc06a9bcd9cb540e48d6f42f8ec7

    • SSDEEP

      6144:EXtW3PhCyc/BAnkAsgtv0ogX2475K+pQ9yf2+GMHxbnuhKeibq3OM:EX4x8ekMvVgX2Q5ZpQ9+371uhM

MITRE ATT&CK Enterprise v15

Tasks