General

  • Target

    9a61bfa70b5f1d24c8ac48d3206ab92a_JaffaCakes118

  • Size

    259KB

  • Sample

    241125-khrveaxrdx

  • MD5

    9a61bfa70b5f1d24c8ac48d3206ab92a

  • SHA1

    22ad4c04319498bf1d9873d2e06d9da29429b7fe

  • SHA256

    cb08fc51b1485e3d5c241e59f401affa129021f866e3b85c62e73b89cd5a1dff

  • SHA512

    b89b9a1c9be139a715e9331deb2b559d567a98c00ee684a86cd97a8925df8556c5e3edf44811ffa9c7bf87af47390e434aa0eba2306353e2565c8b508fa34c2a

  • SSDEEP

    6144:U5HPTsOPhJP7a/4TuPOFTTnUpdY6DrJyk2:+vTBPhtCPO9nedrrJc

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      9a61bfa70b5f1d24c8ac48d3206ab92a_JaffaCakes118

    • Size

      259KB

    • MD5

      9a61bfa70b5f1d24c8ac48d3206ab92a

    • SHA1

      22ad4c04319498bf1d9873d2e06d9da29429b7fe

    • SHA256

      cb08fc51b1485e3d5c241e59f401affa129021f866e3b85c62e73b89cd5a1dff

    • SHA512

      b89b9a1c9be139a715e9331deb2b559d567a98c00ee684a86cd97a8925df8556c5e3edf44811ffa9c7bf87af47390e434aa0eba2306353e2565c8b508fa34c2a

    • SSDEEP

      6144:U5HPTsOPhJP7a/4TuPOFTTnUpdY6DrJyk2:+vTBPhtCPO9nedrrJc

MITRE ATT&CK Enterprise v15

Tasks