General

  • Target

    94bd762a96089f811eeaeb6f40a9e7dc_JaffaCakes118

  • Size

    335KB

  • Sample

    241124-px7avswnhq

  • MD5

    94bd762a96089f811eeaeb6f40a9e7dc

  • SHA1

    4347f5f62d41e1652f3d6cc20bf6398f5a78f5d9

  • SHA256

    c7a773eeb99ea1171dd6f9d54707c8faa532143a085181a80a96aa32080f7876

  • SHA512

    af195cdb53b9658d321edff4af280823e0b21ef09e9ed901d246fdf5b420495e456b137a0a3f75b49f5bd89e6d6baab11701861df16a486f363610cca9cc62ed

  • SSDEEP

    6144:vlDTSNsJsYtP0XVDP2j7h+dXM2DAv65gy0xBEXnXjR6k356Yr7QB:vhoitQVrTXoNx0T35tAB

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      94bd762a96089f811eeaeb6f40a9e7dc_JaffaCakes118

    • Size

      335KB

    • MD5

      94bd762a96089f811eeaeb6f40a9e7dc

    • SHA1

      4347f5f62d41e1652f3d6cc20bf6398f5a78f5d9

    • SHA256

      c7a773eeb99ea1171dd6f9d54707c8faa532143a085181a80a96aa32080f7876

    • SHA512

      af195cdb53b9658d321edff4af280823e0b21ef09e9ed901d246fdf5b420495e456b137a0a3f75b49f5bd89e6d6baab11701861df16a486f363610cca9cc62ed

    • SSDEEP

      6144:vlDTSNsJsYtP0XVDP2j7h+dXM2DAv65gy0xBEXnXjR6k356Yr7QB:vhoitQVrTXoNx0T35tAB

MITRE ATT&CK Enterprise v15

Tasks