General

  • Target

    f0aeca30ef3d016eabcb0869cf316613_JaffaCakes118

  • Size

    255KB

  • Sample

    240921-1q43pswcpq

  • MD5

    f0aeca30ef3d016eabcb0869cf316613

  • SHA1

    8eace598401f9e1103ced3e9a61159399bea69fe

  • SHA256

    8211e47c7ce1c148a5473175220473e16df996c9eb8481766a5b3a2b15bfc74f

  • SHA512

    d5106c4bf15ba47273210910acda3e1d67179431469377850e732cbc2119eff0e512515d6783b9ebd7d7c203dc1a833279455307d3b628f41ebd4e368a7464ca

  • SSDEEP

    6144:ZNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:ZNRdpgdRRoTCD4ijpoix

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f0aeca30ef3d016eabcb0869cf316613_JaffaCakes118

    • Size

      255KB

    • MD5

      f0aeca30ef3d016eabcb0869cf316613

    • SHA1

      8eace598401f9e1103ced3e9a61159399bea69fe

    • SHA256

      8211e47c7ce1c148a5473175220473e16df996c9eb8481766a5b3a2b15bfc74f

    • SHA512

      d5106c4bf15ba47273210910acda3e1d67179431469377850e732cbc2119eff0e512515d6783b9ebd7d7c203dc1a833279455307d3b628f41ebd4e368a7464ca

    • SSDEEP

      6144:ZNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:ZNRdpgdRRoTCD4ijpoix

MITRE ATT&CK Enterprise v15

Tasks