General

  • Target

    77ae4dbb728a323890cf4b75582fb5f3_JaffaCakes118

  • Size

    300KB

  • Sample

    241028-e3z4ma1dqp

  • MD5

    77ae4dbb728a323890cf4b75582fb5f3

  • SHA1

    d51c07b720f26ec9287266188283734d4199eaeb

  • SHA256

    b4c2caaeaad1b4c351835ca54bd6956e957c65168e2c8071360f1321d6e96815

  • SHA512

    6817ce853cd6e9b2ae43c951a9d8232f2fa0056d0e2a4e2ceb6dd1a99c2924f937d5749b250c4e05943f3096e864c44092fae0f7bb7a4ac57474b7779e9e8c59

  • SSDEEP

    6144:5pFEEyZClAlrK5WRVebGHgdM6CJznWNyVbMlPeNks0:rF02AlrKcVebGHgdidWNyMPd

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      77ae4dbb728a323890cf4b75582fb5f3_JaffaCakes118

    • Size

      300KB

    • MD5

      77ae4dbb728a323890cf4b75582fb5f3

    • SHA1

      d51c07b720f26ec9287266188283734d4199eaeb

    • SHA256

      b4c2caaeaad1b4c351835ca54bd6956e957c65168e2c8071360f1321d6e96815

    • SHA512

      6817ce853cd6e9b2ae43c951a9d8232f2fa0056d0e2a4e2ceb6dd1a99c2924f937d5749b250c4e05943f3096e864c44092fae0f7bb7a4ac57474b7779e9e8c59

    • SSDEEP

      6144:5pFEEyZClAlrK5WRVebGHgdM6CJznWNyVbMlPeNks0:rF02AlrKcVebGHgdidWNyMPd

MITRE ATT&CK Enterprise v15

Tasks