General

  • Target

    9dafd43a48dea2ec79e58057c2608f8b_JaffaCakes118

  • Size

    288KB

  • Sample

    241125-y4r9ystrhw

  • MD5

    9dafd43a48dea2ec79e58057c2608f8b

  • SHA1

    799b7d44f5e2a68c32473cda00c2a3d0b5553283

  • SHA256

    e60c04472fcb901694d27b9d481ea86e522f84ee4e4662ae316752abc16a6a37

  • SHA512

    7d9a871defb2140dd97f0839147deee909c75edab12ef8f10e96d3782f37f2a990e1368b84137f0209c5b96d1f77b09c486115f46e23051aa5d7779389674fa8

  • SSDEEP

    6144:q0aOiw7Fmu7wYrQ4uyV0iyU0rTWxB1YO4I2BbuC+4uwiq7YTx:q0a0AmwYrJ0iyUkW31YDpZQNwiqcF

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      9dafd43a48dea2ec79e58057c2608f8b_JaffaCakes118

    • Size

      288KB

    • MD5

      9dafd43a48dea2ec79e58057c2608f8b

    • SHA1

      799b7d44f5e2a68c32473cda00c2a3d0b5553283

    • SHA256

      e60c04472fcb901694d27b9d481ea86e522f84ee4e4662ae316752abc16a6a37

    • SHA512

      7d9a871defb2140dd97f0839147deee909c75edab12ef8f10e96d3782f37f2a990e1368b84137f0209c5b96d1f77b09c486115f46e23051aa5d7779389674fa8

    • SSDEEP

      6144:q0aOiw7Fmu7wYrQ4uyV0iyU0rTWxB1YO4I2BbuC+4uwiq7YTx:q0a0AmwYrJ0iyUkW31YDpZQNwiqcF

MITRE ATT&CK Enterprise v15

Tasks