General

  • Target

    f0501bb43afa1af4885aba852c9d795f_JaffaCakes118

  • Size

    281KB

  • Sample

    240921-v722saveln

  • MD5

    f0501bb43afa1af4885aba852c9d795f

  • SHA1

    01b38421fbadb8adab1a6206ca7ce6cda2320208

  • SHA256

    9016a602ac174c855fcaefa9769492002fe9a203d06c760f1dafc69046b7e3c1

  • SHA512

    ad8022fc229acbcb6f825d108936507b86c53efb8ca458f5f73df7a118b2a1383daf5909668d3aa6894734370fd9ce79c2d9b048b352012016f59b32dccd7c48

  • SSDEEP

    6144:VpcnH1hymlUEAsvK7ke5L3iFPwsj9CnL9R6jbKVCA7W5f1uHVOJ:VpYDycUEAWK7SCsj9kLnCAS9IVW

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f0501bb43afa1af4885aba852c9d795f_JaffaCakes118

    • Size

      281KB

    • MD5

      f0501bb43afa1af4885aba852c9d795f

    • SHA1

      01b38421fbadb8adab1a6206ca7ce6cda2320208

    • SHA256

      9016a602ac174c855fcaefa9769492002fe9a203d06c760f1dafc69046b7e3c1

    • SHA512

      ad8022fc229acbcb6f825d108936507b86c53efb8ca458f5f73df7a118b2a1383daf5909668d3aa6894734370fd9ce79c2d9b048b352012016f59b32dccd7c48

    • SSDEEP

      6144:VpcnH1hymlUEAsvK7ke5L3iFPwsj9CnL9R6jbKVCA7W5f1uHVOJ:VpYDycUEAWK7SCsj9kLnCAS9IVW

MITRE ATT&CK Enterprise v15

Tasks