General

  • Target

    8160099e1257d383d437f88a58b3ed01_JaffaCakes118

  • Size

    295KB

  • Sample

    241031-dqm3vszmcr

  • MD5

    8160099e1257d383d437f88a58b3ed01

  • SHA1

    af46b73cf0404be99861613f9371ae62620ad2a0

  • SHA256

    91a84d5b9b595c4b69c536ecdb923fa1fad1f7bfb01e84ac331ade5b3059885b

  • SHA512

    7709d764ddae03b6dcbba81c711284a4e38c1ecb6647f930450280575482133ada54b9f16a6a2fd23c0db48341323d519149f19aad281906301eacdff7662858

  • SSDEEP

    6144:PoT74Va1kira1cPc43KoeqaBa4GJkmSVOq8ub:PM8Va+irV13Vqa4GemSj8ub

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      8160099e1257d383d437f88a58b3ed01_JaffaCakes118

    • Size

      295KB

    • MD5

      8160099e1257d383d437f88a58b3ed01

    • SHA1

      af46b73cf0404be99861613f9371ae62620ad2a0

    • SHA256

      91a84d5b9b595c4b69c536ecdb923fa1fad1f7bfb01e84ac331ade5b3059885b

    • SHA512

      7709d764ddae03b6dcbba81c711284a4e38c1ecb6647f930450280575482133ada54b9f16a6a2fd23c0db48341323d519149f19aad281906301eacdff7662858

    • SSDEEP

      6144:PoT74Va1kira1cPc43KoeqaBa4GJkmSVOq8ub:PM8Va+irV13Vqa4GemSj8ub

MITRE ATT&CK Enterprise v15

Tasks