General

  • Target

    960b1370d6495f6b2115d2bd452adbf4_JaffaCakes118

  • Size

    250KB

  • Sample

    241124-vjhy1awkbp

  • MD5

    960b1370d6495f6b2115d2bd452adbf4

  • SHA1

    9189694af921927eacd7403328930e08b23eef3c

  • SHA256

    bf2af289073c1ce1cf7cde6f183fb1b5ec5aef5c29198a2e53b63311396328b0

  • SHA512

    3f2c7de6ccdf5963e4d32c0822679f41942bb104fcf213ec9b7779731a9227dc255fb400d4235cc8d1e1a9050b70cdfa7ecadddc3079bc6c7c3d001d253b05a5

  • SSDEEP

    6144:PALDWn7bRNEl+R6yxL9yT6JbzR+J1J5QZK2nbREoIr/R:PSkHRNBBVi6JHMJ+Rnb65

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      960b1370d6495f6b2115d2bd452adbf4_JaffaCakes118

    • Size

      250KB

    • MD5

      960b1370d6495f6b2115d2bd452adbf4

    • SHA1

      9189694af921927eacd7403328930e08b23eef3c

    • SHA256

      bf2af289073c1ce1cf7cde6f183fb1b5ec5aef5c29198a2e53b63311396328b0

    • SHA512

      3f2c7de6ccdf5963e4d32c0822679f41942bb104fcf213ec9b7779731a9227dc255fb400d4235cc8d1e1a9050b70cdfa7ecadddc3079bc6c7c3d001d253b05a5

    • SSDEEP

      6144:PALDWn7bRNEl+R6yxL9yT6JbzR+J1J5QZK2nbREoIr/R:PSkHRNBBVi6JHMJ+Rnb65

MITRE ATT&CK Enterprise v15

Tasks