General

  • Target

    9bf7a2cf740e4fa32c30e6d11cc33f43_JaffaCakes118

  • Size

    254KB

  • Sample

    241125-rez5yawrbk

  • MD5

    9bf7a2cf740e4fa32c30e6d11cc33f43

  • SHA1

    1d09d1a8785c43d87256a6a0fc499952b5fd6c50

  • SHA256

    491535653824685369cecfb7b069ab2f2a3114e02d158dbdb2541e1b4b9558f1

  • SHA512

    7c0a264993002559672f3ae3343bd119c7677b8de9187330c5f445b6cd63e4d79d698730ff3d050d063fd3e16e1028c2b1e5ab754d29379ccfb038965a9829df

  • SSDEEP

    3072:U/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:iwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      9bf7a2cf740e4fa32c30e6d11cc33f43_JaffaCakes118

    • Size

      254KB

    • MD5

      9bf7a2cf740e4fa32c30e6d11cc33f43

    • SHA1

      1d09d1a8785c43d87256a6a0fc499952b5fd6c50

    • SHA256

      491535653824685369cecfb7b069ab2f2a3114e02d158dbdb2541e1b4b9558f1

    • SHA512

      7c0a264993002559672f3ae3343bd119c7677b8de9187330c5f445b6cd63e4d79d698730ff3d050d063fd3e16e1028c2b1e5ab754d29379ccfb038965a9829df

    • SSDEEP

      3072:U/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:iwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

MITRE ATT&CK Enterprise v15

Tasks