General

  • Target

    eaafbe8a4d2b2a7d4d6a60a71d8f6bc6_JaffaCakes118

  • Size

    264KB

  • Sample

    240919-gcbdpatbna

  • MD5

    eaafbe8a4d2b2a7d4d6a60a71d8f6bc6

  • SHA1

    d45d11c08fdfee4eb942f74e36d3fc9a42518fc2

  • SHA256

    1056221a40871deb14b3231536ed8a0adb9de26ababce75a5327e9babfec459e

  • SHA512

    f56a00e690414065da3a90e4ea973561e5726c359530e32956525ea90032a63d3dc47d0909a720a363e7b6b01d10a5caff03d9e4cfea4d726d1829d419d19a96

  • SSDEEP

    6144:6rlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:soZ8qpUwufw8T6XLNhcwHWntbbK

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      eaafbe8a4d2b2a7d4d6a60a71d8f6bc6_JaffaCakes118

    • Size

      264KB

    • MD5

      eaafbe8a4d2b2a7d4d6a60a71d8f6bc6

    • SHA1

      d45d11c08fdfee4eb942f74e36d3fc9a42518fc2

    • SHA256

      1056221a40871deb14b3231536ed8a0adb9de26ababce75a5327e9babfec459e

    • SHA512

      f56a00e690414065da3a90e4ea973561e5726c359530e32956525ea90032a63d3dc47d0909a720a363e7b6b01d10a5caff03d9e4cfea4d726d1829d419d19a96

    • SSDEEP

      6144:6rlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:soZ8qpUwufw8T6XLNhcwHWntbbK

MITRE ATT&CK Enterprise v15

Tasks