General

  • Target

    a605501dd8c630d67d361260db66960f_JaffaCakes118

  • Size

    295KB

  • Sample

    241127-fk3bpsyjcv

  • MD5

    a605501dd8c630d67d361260db66960f

  • SHA1

    4d7937e4854b82a5fa715765b381c013bde607cc

  • SHA256

    9253ed48b5b703795a55f560528b16e4dc65fd62cc31fdcfcf7a32568e1b69f3

  • SHA512

    1104983cf114a994c921471ebe756678c5da1dcc276985dedec19f8816edcaa687c0c519ec1d6159b9a3ef0cfa787c10bc737d5536b30772793359db64aaa0e6

  • SSDEEP

    6144:g9Ncj86i7QaMyUtZahwg5dmgFDMH5hhZOxHg7SbOr16p+Baemv+:5h7tZkwgy9ZhbOZCSbOgPv

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      a605501dd8c630d67d361260db66960f_JaffaCakes118

    • Size

      295KB

    • MD5

      a605501dd8c630d67d361260db66960f

    • SHA1

      4d7937e4854b82a5fa715765b381c013bde607cc

    • SHA256

      9253ed48b5b703795a55f560528b16e4dc65fd62cc31fdcfcf7a32568e1b69f3

    • SHA512

      1104983cf114a994c921471ebe756678c5da1dcc276985dedec19f8816edcaa687c0c519ec1d6159b9a3ef0cfa787c10bc737d5536b30772793359db64aaa0e6

    • SSDEEP

      6144:g9Ncj86i7QaMyUtZahwg5dmgFDMH5hhZOxHg7SbOr16p+Baemv+:5h7tZkwgy9ZhbOZCSbOgPv

MITRE ATT&CK Enterprise v15

Tasks