General

  • Target

    8df0bc14603532432abfa4a347cf8c49_JaffaCakes118

  • Size

    262KB

  • Sample

    241103-227teawmat

  • MD5

    8df0bc14603532432abfa4a347cf8c49

  • SHA1

    a16c8b1fb05adda6e5b17da8c1ab52d78fd346ad

  • SHA256

    784d5604ed6741c09c8e21204e3fb507f9bbc134def07722144df536608e0661

  • SHA512

    91006372742784ac7de2fe7813829bf533f0d665c608d1683f4c0000025e5210fbfca4a9c426c0ba45c26adb6638bc2488febbb288394c273b0941c8424d8472

  • SSDEEP

    6144:X7Y3QPWMcdCHQdvX+kAyGGrnvYh/TMPEUrODC0:X7Y3TC0AKvYpTLe0

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      8df0bc14603532432abfa4a347cf8c49_JaffaCakes118

    • Size

      262KB

    • MD5

      8df0bc14603532432abfa4a347cf8c49

    • SHA1

      a16c8b1fb05adda6e5b17da8c1ab52d78fd346ad

    • SHA256

      784d5604ed6741c09c8e21204e3fb507f9bbc134def07722144df536608e0661

    • SHA512

      91006372742784ac7de2fe7813829bf533f0d665c608d1683f4c0000025e5210fbfca4a9c426c0ba45c26adb6638bc2488febbb288394c273b0941c8424d8472

    • SSDEEP

      6144:X7Y3QPWMcdCHQdvX+kAyGGrnvYh/TMPEUrODC0:X7Y3TC0AKvYpTLe0

MITRE ATT&CK Enterprise v15

Tasks