General

  • Target

    99d0e1760fbf51f7489440190e29e329_JaffaCakes118

  • Size

    250KB

  • Sample

    241125-hdryhatnfy

  • MD5

    99d0e1760fbf51f7489440190e29e329

  • SHA1

    3fe0e9ef28e9c7e6729601989e6fa6bf15d28ff2

  • SHA256

    916d313efe19696dd9a9e8aa1a67937c50a65d6d377ca8089615f5fa9f1e4336

  • SHA512

    fa725f97e010bc5bdd85d122055bd4cea0de1fd3ce8332f10e27140171c88b025d3b72a385c960fdf73ed2bed25a41e8a4d1df4565ce6679285f81faf3cce603

  • SSDEEP

    3072:3GOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:lXxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      99d0e1760fbf51f7489440190e29e329_JaffaCakes118

    • Size

      250KB

    • MD5

      99d0e1760fbf51f7489440190e29e329

    • SHA1

      3fe0e9ef28e9c7e6729601989e6fa6bf15d28ff2

    • SHA256

      916d313efe19696dd9a9e8aa1a67937c50a65d6d377ca8089615f5fa9f1e4336

    • SHA512

      fa725f97e010bc5bdd85d122055bd4cea0de1fd3ce8332f10e27140171c88b025d3b72a385c960fdf73ed2bed25a41e8a4d1df4565ce6679285f81faf3cce603

    • SSDEEP

      3072:3GOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:lXxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

MITRE ATT&CK Enterprise v15

Tasks