General

  • Target

    a5f0bcf4114ef370d089fecc323b6508_JaffaCakes118

  • Size

    309KB

  • Sample

    241127-e8qr5sxma1

  • MD5

    a5f0bcf4114ef370d089fecc323b6508

  • SHA1

    3c46db20a08fb76d44783262d32347992d74f4ab

  • SHA256

    809ff8ff232af08bff4926d3de1735f371f3041cd750f38617db0ee295f59962

  • SHA512

    f6cc00b1944d4f8b2299815c3ffa7b401b33eb70f64375ae2404b7410c20722b1d4a5f09f0c35f224159719e6098f4d8aea960097302d7d12da568dae45bc37c

  • SSDEEP

    6144:fEoTDHxAcidjh1ghyVkdQRWh7wg+FQRXlqxnwkaEL8XZkaYx3KAdd2L:fEoXHxAcAj8hyVkdQ8l4QqJzL8XZkaAc

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      a5f0bcf4114ef370d089fecc323b6508_JaffaCakes118

    • Size

      309KB

    • MD5

      a5f0bcf4114ef370d089fecc323b6508

    • SHA1

      3c46db20a08fb76d44783262d32347992d74f4ab

    • SHA256

      809ff8ff232af08bff4926d3de1735f371f3041cd750f38617db0ee295f59962

    • SHA512

      f6cc00b1944d4f8b2299815c3ffa7b401b33eb70f64375ae2404b7410c20722b1d4a5f09f0c35f224159719e6098f4d8aea960097302d7d12da568dae45bc37c

    • SSDEEP

      6144:fEoTDHxAcidjh1ghyVkdQRWh7wg+FQRXlqxnwkaEL8XZkaYx3KAdd2L:fEoXHxAcAj8hyVkdQ8l4QqJzL8XZkaAc

MITRE ATT&CK Enterprise v15

Tasks