General

  • Target

    9c3130a1fdaeee6c7da3a43bed69a7ef_JaffaCakes118

  • Size

    267KB

  • Sample

    241125-r9zsnasjdx

  • MD5

    9c3130a1fdaeee6c7da3a43bed69a7ef

  • SHA1

    49ac91f200e95a9ce0d5b68314d994776ed722e4

  • SHA256

    8318e3a2d07099a83a8fb7f5449571c4dcd1742944f6f9a1ff3f7e3dec56062f

  • SHA512

    7b577b9aaec256beb7b382e75fbbd1e99d768191cfa6bd821280632f761ebfbba692af99ff8e0fe63da76bcd58f229096c27d2e92b8d53b06d2636b7303ab24a

  • SSDEEP

    3072:+GlxnBz9w8A1jwDHmcAB+F2SHp13GqlVkRm3l7Vt57deWxLX9l2QOKRs9UE+4y/R:zq5wDdCn6PlVDPuWxhh5aMyAWmOyR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      9c3130a1fdaeee6c7da3a43bed69a7ef_JaffaCakes118

    • Size

      267KB

    • MD5

      9c3130a1fdaeee6c7da3a43bed69a7ef

    • SHA1

      49ac91f200e95a9ce0d5b68314d994776ed722e4

    • SHA256

      8318e3a2d07099a83a8fb7f5449571c4dcd1742944f6f9a1ff3f7e3dec56062f

    • SHA512

      7b577b9aaec256beb7b382e75fbbd1e99d768191cfa6bd821280632f761ebfbba692af99ff8e0fe63da76bcd58f229096c27d2e92b8d53b06d2636b7303ab24a

    • SSDEEP

      3072:+GlxnBz9w8A1jwDHmcAB+F2SHp13GqlVkRm3l7Vt57deWxLX9l2QOKRs9UE+4y/R:zq5wDdCn6PlVDPuWxhh5aMyAWmOyR

MITRE ATT&CK Enterprise v15

Tasks