General

  • Target

    ea9e351e43e6b6898ce328da65ddb97b_JaffaCakes118

  • Size

    259KB

  • Sample

    240919-fgfcrssarl

  • MD5

    ea9e351e43e6b6898ce328da65ddb97b

  • SHA1

    c49e046eedca7b21d264684127fd8a057e819ec0

  • SHA256

    54fba8b359776e0d2fe07d900a8892dff1388c237144b298d8b8ffe34d4cd7da

  • SHA512

    97388d273d6e384585c3baa66c3838ffb4415cb47b7285625c6a63b9cd75996069f427f743fe4feb941cb6c7234cb4543e28e4527d3ea32305560bd82a3a7423

  • SSDEEP

    6144:q7UXuxP/rOEMS4s6CqQUDdF2uLCyoUC9e2voN:wzyShqQUDdF2uaoN

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      ea9e351e43e6b6898ce328da65ddb97b_JaffaCakes118

    • Size

      259KB

    • MD5

      ea9e351e43e6b6898ce328da65ddb97b

    • SHA1

      c49e046eedca7b21d264684127fd8a057e819ec0

    • SHA256

      54fba8b359776e0d2fe07d900a8892dff1388c237144b298d8b8ffe34d4cd7da

    • SHA512

      97388d273d6e384585c3baa66c3838ffb4415cb47b7285625c6a63b9cd75996069f427f743fe4feb941cb6c7234cb4543e28e4527d3ea32305560bd82a3a7423

    • SSDEEP

      6144:q7UXuxP/rOEMS4s6CqQUDdF2uLCyoUC9e2voN:wzyShqQUDdF2uaoN

    • Modifies WinLogon for persistence

    • simda

      Simda is an infostealer written in C++.

    • Adds Run key to start application

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Modifies WinLogon

MITRE ATT&CK Enterprise v15

Tasks