General

  • Target

    dcb10c0c1d6f924f52836e717bb9c0c1_JaffaCakes118

  • Size

    262KB

  • Sample

    240912-vvlt2avfrm

  • MD5

    dcb10c0c1d6f924f52836e717bb9c0c1

  • SHA1

    ccf39569a465975636cf97cd8cb0c115b21db942

  • SHA256

    121fa5451c937bf0270f14cfe1a358ba4b60fe5cd501ba64b92ab16a8d6de0ef

  • SHA512

    9f2566a0212eac9fade08eea3e23f8d79c4062878faccc0f5ff410eeec40952e8d6e40d42d1d2bfea7922aae8d3a7a6f636e8514abdeb70cdf0f10e082ef78ce

  • SSDEEP

    6144:Xwf1c+G/3K/IkaKqCcVgdWBDcY+/OGExrrQ:XQmh/a/IhOcydMR+/OG6rQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      dcb10c0c1d6f924f52836e717bb9c0c1_JaffaCakes118

    • Size

      262KB

    • MD5

      dcb10c0c1d6f924f52836e717bb9c0c1

    • SHA1

      ccf39569a465975636cf97cd8cb0c115b21db942

    • SHA256

      121fa5451c937bf0270f14cfe1a358ba4b60fe5cd501ba64b92ab16a8d6de0ef

    • SHA512

      9f2566a0212eac9fade08eea3e23f8d79c4062878faccc0f5ff410eeec40952e8d6e40d42d1d2bfea7922aae8d3a7a6f636e8514abdeb70cdf0f10e082ef78ce

    • SSDEEP

      6144:Xwf1c+G/3K/IkaKqCcVgdWBDcY+/OGExrrQ:XQmh/a/IhOcydMR+/OG6rQ

MITRE ATT&CK Enterprise v15

Tasks