General

  • Target

    917a4d40614bbfd29329033dd2d90412_JaffaCakes118

  • Size

    277KB

  • Sample

    241124-ahm64stpdz

  • MD5

    917a4d40614bbfd29329033dd2d90412

  • SHA1

    93680d65e402d81807a5bcadd517ed59fd1100be

  • SHA256

    cc0005328ffc824f68d4ec956b84107be35580429c89a593f43654d626565ba1

  • SHA512

    09cda9ddc781d49cc95e9ab8e55d62f3881f53d3f53996e7b1dbf20bfb6a4236a39aae09dfb5b924a533b305af4fb297d8d0219fd764fb93273288ac459b2dc2

  • SSDEEP

    6144:r6FyHwU+uQ5Srp3ybPFQNu8MDKkqZyft8T8cEfkXb1lcD8aDiuYnNlnx5:r7zUAZSKu8U7l5cEG3oTDiVnJ5

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      917a4d40614bbfd29329033dd2d90412_JaffaCakes118

    • Size

      277KB

    • MD5

      917a4d40614bbfd29329033dd2d90412

    • SHA1

      93680d65e402d81807a5bcadd517ed59fd1100be

    • SHA256

      cc0005328ffc824f68d4ec956b84107be35580429c89a593f43654d626565ba1

    • SHA512

      09cda9ddc781d49cc95e9ab8e55d62f3881f53d3f53996e7b1dbf20bfb6a4236a39aae09dfb5b924a533b305af4fb297d8d0219fd764fb93273288ac459b2dc2

    • SSDEEP

      6144:r6FyHwU+uQ5Srp3ybPFQNu8MDKkqZyft8T8cEfkXb1lcD8aDiuYnNlnx5:r7zUAZSKu8U7l5cEG3oTDiVnJ5

MITRE ATT&CK Enterprise v15

Tasks