General

  • Target

    9e2cec42c0e39a69eb60948eab39463c_JaffaCakes118

  • Size

    274KB

  • Sample

    241125-13ch8awkcq

  • MD5

    9e2cec42c0e39a69eb60948eab39463c

  • SHA1

    588a287c5bd0efad78a6733cd597aabdc836443b

  • SHA256

    890ed9ea9c2e45233ba7b3462939cca7b807da935ba1178d24c9a44608289fa0

  • SHA512

    808e189090f3263b1ec776a8068310c864b0d0cf835407b738a0fc47f42e7c2cbc67663e9eb976fd90dab5887e2272b13a5e5c067acaeda1d5ab25f8a9dfdf1e

  • SSDEEP

    3072:fpGO3F0EzKTQh/v3eeCX6OjL5Flzi0Y217rL74+uR0FU1LpeeQVoKHbRxHF4E:BXFxGEh/vn4jlnzi0jPPseRVPjHF4E

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      9e2cec42c0e39a69eb60948eab39463c_JaffaCakes118

    • Size

      274KB

    • MD5

      9e2cec42c0e39a69eb60948eab39463c

    • SHA1

      588a287c5bd0efad78a6733cd597aabdc836443b

    • SHA256

      890ed9ea9c2e45233ba7b3462939cca7b807da935ba1178d24c9a44608289fa0

    • SHA512

      808e189090f3263b1ec776a8068310c864b0d0cf835407b738a0fc47f42e7c2cbc67663e9eb976fd90dab5887e2272b13a5e5c067acaeda1d5ab25f8a9dfdf1e

    • SSDEEP

      3072:fpGO3F0EzKTQh/v3eeCX6OjL5Flzi0Y217rL74+uR0FU1LpeeQVoKHbRxHF4E:BXFxGEh/vn4jlnzi0jPPseRVPjHF4E

MITRE ATT&CK Enterprise v15

Tasks