General

  • Target

    841f75e38b3221111a6e85dc98607738_JaffaCakes118

  • Size

    238KB

  • Sample

    241101-f35jsavrex

  • MD5

    841f75e38b3221111a6e85dc98607738

  • SHA1

    4507e6a38c0d7f7de744f1556720610b6c405afc

  • SHA256

    d5e0569699db16ff151992352d0d143d1e7e99fd2953a19adf37f54e6553bb13

  • SHA512

    4d5e49d1b0c6467d3851737b29be4abaf8efe4bb3ed46b7e2b5d0cba23e72fba7cf876e90c9b5e72eb1f7053300d271c51aa5d6f416060795b04e15f589694fc

  • SSDEEP

    6144:+RuhORg5xyqn2ApNN5CGHA8PBhf+Uh3iTh+lV:+o5YApxHA8PBhfgwV

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      841f75e38b3221111a6e85dc98607738_JaffaCakes118

    • Size

      238KB

    • MD5

      841f75e38b3221111a6e85dc98607738

    • SHA1

      4507e6a38c0d7f7de744f1556720610b6c405afc

    • SHA256

      d5e0569699db16ff151992352d0d143d1e7e99fd2953a19adf37f54e6553bb13

    • SHA512

      4d5e49d1b0c6467d3851737b29be4abaf8efe4bb3ed46b7e2b5d0cba23e72fba7cf876e90c9b5e72eb1f7053300d271c51aa5d6f416060795b04e15f589694fc

    • SSDEEP

      6144:+RuhORg5xyqn2ApNN5CGHA8PBhf+Uh3iTh+lV:+o5YApxHA8PBhfgwV

MITRE ATT&CK Enterprise v15

Tasks