General

  • Target

    fc40a53ba2eb75b1b612dd9e82278f1e_JaffaCakes118

  • Size

    200KB

  • Sample

    240928-n6kb1svdjl

  • MD5

    fc40a53ba2eb75b1b612dd9e82278f1e

  • SHA1

    e4c8bee7795d4b071a587dd8a0e409266797fdad

  • SHA256

    7e5966d6652ab421ea9b7ebcd5ff784ce6ae6c2d19f05ac2ddc100a077e310da

  • SHA512

    e6dfa10f9668a4cacdc8862755b43213ddad882cc9a77c62e2e06328825bf6bb557e7506c02a529c2639267284a22a8afc30b09ae1c3e87faab13164bfb35e69

  • SSDEEP

    3072:npWublibF0drug5A1d6q97Kbf3pnD1GeJ07nEloeu1o8zTZ9i9XnBiZCyL2:pWTFOno197Kl5Gu074oS8HkXBiZC

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      fc40a53ba2eb75b1b612dd9e82278f1e_JaffaCakes118

    • Size

      200KB

    • MD5

      fc40a53ba2eb75b1b612dd9e82278f1e

    • SHA1

      e4c8bee7795d4b071a587dd8a0e409266797fdad

    • SHA256

      7e5966d6652ab421ea9b7ebcd5ff784ce6ae6c2d19f05ac2ddc100a077e310da

    • SHA512

      e6dfa10f9668a4cacdc8862755b43213ddad882cc9a77c62e2e06328825bf6bb557e7506c02a529c2639267284a22a8afc30b09ae1c3e87faab13164bfb35e69

    • SSDEEP

      3072:npWublibF0drug5A1d6q97Kbf3pnD1GeJ07nEloeu1o8zTZ9i9XnBiZCyL2:pWTFOno197Kl5Gu074oS8HkXBiZC

MITRE ATT&CK Enterprise v15

Tasks