General

  • Target

    0b8202c12adbed139477427b4be69e06_JaffaCakes118

  • Size

    258KB

  • Sample

    241002-tnhclavgpl

  • MD5

    0b8202c12adbed139477427b4be69e06

  • SHA1

    1b39340c2b760e2b3161717037191ef023183403

  • SHA256

    65872175b0083d4f69c77c74b58cfd9e99c1a8073853055b8190d4d87595ce1b

  • SHA512

    395b9a890053ab3b78867b784509f3ae1b549f3fd0e4e59fdace6bbead5d0dc292eaec91fd89e49fb42cc3cc88d168a2e741c1fc1630e9b58b0ffcaec4fb0c31

  • SSDEEP

    6144:SyqIDbw+NoziFRZLob+lBpdgEA1fmd4qgvSg2nH:FqID/PZLob+lBpdXYmSq+STH

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      0b8202c12adbed139477427b4be69e06_JaffaCakes118

    • Size

      258KB

    • MD5

      0b8202c12adbed139477427b4be69e06

    • SHA1

      1b39340c2b760e2b3161717037191ef023183403

    • SHA256

      65872175b0083d4f69c77c74b58cfd9e99c1a8073853055b8190d4d87595ce1b

    • SHA512

      395b9a890053ab3b78867b784509f3ae1b549f3fd0e4e59fdace6bbead5d0dc292eaec91fd89e49fb42cc3cc88d168a2e741c1fc1630e9b58b0ffcaec4fb0c31

    • SSDEEP

      6144:SyqIDbw+NoziFRZLob+lBpdgEA1fmd4qgvSg2nH:FqID/PZLob+lBpdXYmSq+STH

MITRE ATT&CK Enterprise v15

Tasks