General

  • Target

    9aa60120b1c37bf537fed3e3618cd53f_JaffaCakes118

  • Size

    292KB

  • Sample

    241125-lf3dsswlhq

  • MD5

    9aa60120b1c37bf537fed3e3618cd53f

  • SHA1

    5c5da55f5933c454c3f7e69cd49cf39f01976428

  • SHA256

    0bc9c22ddc2ba03bb1e04a7a04812761c3bca4ae3956f760ef854762825c1799

  • SHA512

    ab4199bb98d791b326efcb97c34fbfefe13de4029dd92d9b872b38923ed2b32d5ff96c57d9222d3e11b0f3125aa5691273478677408a3b8b8ebcc5ef8752e38f

  • SSDEEP

    6144:fAKgynI7Nj/H1nTB/3EqaiOKEybtFn3SesArTy6TbD0Pwii:wFjNnTFDPPtFn3SesAfPp

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      9aa60120b1c37bf537fed3e3618cd53f_JaffaCakes118

    • Size

      292KB

    • MD5

      9aa60120b1c37bf537fed3e3618cd53f

    • SHA1

      5c5da55f5933c454c3f7e69cd49cf39f01976428

    • SHA256

      0bc9c22ddc2ba03bb1e04a7a04812761c3bca4ae3956f760ef854762825c1799

    • SHA512

      ab4199bb98d791b326efcb97c34fbfefe13de4029dd92d9b872b38923ed2b32d5ff96c57d9222d3e11b0f3125aa5691273478677408a3b8b8ebcc5ef8752e38f

    • SSDEEP

      6144:fAKgynI7Nj/H1nTB/3EqaiOKEybtFn3SesArTy6TbD0Pwii:wFjNnTFDPPtFn3SesAfPp

MITRE ATT&CK Enterprise v15

Tasks