General

  • Target

    8b9e8e3b80d6c18f3e2d383cdd18f126_JaffaCakes118

  • Size

    251KB

  • Sample

    241103-qatlxsvcld

  • MD5

    8b9e8e3b80d6c18f3e2d383cdd18f126

  • SHA1

    1f8e40e14593e96b1467d6d4e88bc53e1803b609

  • SHA256

    5380545e7434690f9ef25e663ba36c3c98315f066059aeb41bc11f164c7b1165

  • SHA512

    5871e67daf52f720bf03d25dce6383793a4801f61b3a28c3afd8ca3d38b2f60108e9dbf0e8b41a418fa1ff4e16339710806b4618c5698e7c7c525b0b0fa499e5

  • SSDEEP

    6144:NSWl3JjTjAx5fkvwrqfJNM24/35ZKKUJaVEJbB:dl9nAEX34fHKBaEb

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      8b9e8e3b80d6c18f3e2d383cdd18f126_JaffaCakes118

    • Size

      251KB

    • MD5

      8b9e8e3b80d6c18f3e2d383cdd18f126

    • SHA1

      1f8e40e14593e96b1467d6d4e88bc53e1803b609

    • SHA256

      5380545e7434690f9ef25e663ba36c3c98315f066059aeb41bc11f164c7b1165

    • SHA512

      5871e67daf52f720bf03d25dce6383793a4801f61b3a28c3afd8ca3d38b2f60108e9dbf0e8b41a418fa1ff4e16339710806b4618c5698e7c7c525b0b0fa499e5

    • SSDEEP

      6144:NSWl3JjTjAx5fkvwrqfJNM24/35ZKKUJaVEJbB:dl9nAEX34fHKBaEb

MITRE ATT&CK Enterprise v15

Tasks