General

  • Target

    ed6cb5c37c07c482b9584770964b461c_JaffaCakes118

  • Size

    261KB

  • Sample

    240920-mxevhasgkq

  • MD5

    ed6cb5c37c07c482b9584770964b461c

  • SHA1

    57ae63adf210eb6f70acd9f57cbba5089a4509f2

  • SHA256

    91f5e275ee64a42d875bc67e5326c08d7552c59176af125632cb6e7372fba30d

  • SHA512

    1dc7f301be0547ec70e9a16985e5c89b07622c1ae5fa073b62f42c2d1c06a90bb16d2450941b5a4cec4fc2619137725879c35759054fbfe36e159bf26315cf45

  • SSDEEP

    6144:CayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:8Cua88SEjbEwvpZBZQfZhh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      ed6cb5c37c07c482b9584770964b461c_JaffaCakes118

    • Size

      261KB

    • MD5

      ed6cb5c37c07c482b9584770964b461c

    • SHA1

      57ae63adf210eb6f70acd9f57cbba5089a4509f2

    • SHA256

      91f5e275ee64a42d875bc67e5326c08d7552c59176af125632cb6e7372fba30d

    • SHA512

      1dc7f301be0547ec70e9a16985e5c89b07622c1ae5fa073b62f42c2d1c06a90bb16d2450941b5a4cec4fc2619137725879c35759054fbfe36e159bf26315cf45

    • SSDEEP

      6144:CayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:8Cua88SEjbEwvpZBZQfZhh

MITRE ATT&CK Enterprise v15

Tasks