General

  • Target

    9533d6686138fca29c0590001b2e89f6_JaffaCakes118

  • Size

    276KB

  • Sample

    241124-rlcm8azlak

  • MD5

    9533d6686138fca29c0590001b2e89f6

  • SHA1

    f57461de496a25b8656ca48395a37d7eb62726e7

  • SHA256

    c9e0f8bfc7188a7a5de8ceb4d762d330a98886699716ce6c218c975385794c7d

  • SHA512

    0925d17ee9fb4162efde8eefa8653a413e3e6ae3d9ab8e940d1fe61d1a4c2d62f2a578e0b3467c6ad4bf1397ccc55e05246faa45ddca5cde712bebac25e5b5d3

  • SSDEEP

    6144:o/1HnOBywO+PnbfMIQFSQMX0Wy6XtdFCGJvi5w:oNQuU1XXdyvGJo

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      9533d6686138fca29c0590001b2e89f6_JaffaCakes118

    • Size

      276KB

    • MD5

      9533d6686138fca29c0590001b2e89f6

    • SHA1

      f57461de496a25b8656ca48395a37d7eb62726e7

    • SHA256

      c9e0f8bfc7188a7a5de8ceb4d762d330a98886699716ce6c218c975385794c7d

    • SHA512

      0925d17ee9fb4162efde8eefa8653a413e3e6ae3d9ab8e940d1fe61d1a4c2d62f2a578e0b3467c6ad4bf1397ccc55e05246faa45ddca5cde712bebac25e5b5d3

    • SSDEEP

      6144:o/1HnOBywO+PnbfMIQFSQMX0Wy6XtdFCGJvi5w:oNQuU1XXdyvGJo

MITRE ATT&CK Enterprise v15

Tasks