General

  • Target

    a7f5cd5224e9aa38cb7db964e9d496b9_JaffaCakes118

  • Size

    258KB

  • Sample

    241127-p79hzatrdw

  • MD5

    a7f5cd5224e9aa38cb7db964e9d496b9

  • SHA1

    5d3497ab0e4a2f24bf8bcd05bfb5cc20750efdb5

  • SHA256

    1b4e0ec7416a1d4941b55ced0c56facba7117dc5a3f0a2250fd0ebcbb2596ff8

  • SHA512

    9941b0b3da06fafa747719ee5db4e63334c7597e227ede9b6b140e3050444dbfa55d047733b6c091c0a0405eee24ecc832a0fb6049f74f3fece44fa69c41db2e

  • SSDEEP

    6144:RyCQplYo1lKQYohSQfDpjCFQh4dPLZlPBtdVNyiiiQYWABK2b+ZZsx:RyxVQdohSQNjLh4PLZ5l2XdYWAc/ZZk

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      a7f5cd5224e9aa38cb7db964e9d496b9_JaffaCakes118

    • Size

      258KB

    • MD5

      a7f5cd5224e9aa38cb7db964e9d496b9

    • SHA1

      5d3497ab0e4a2f24bf8bcd05bfb5cc20750efdb5

    • SHA256

      1b4e0ec7416a1d4941b55ced0c56facba7117dc5a3f0a2250fd0ebcbb2596ff8

    • SHA512

      9941b0b3da06fafa747719ee5db4e63334c7597e227ede9b6b140e3050444dbfa55d047733b6c091c0a0405eee24ecc832a0fb6049f74f3fece44fa69c41db2e

    • SSDEEP

      6144:RyCQplYo1lKQYohSQfDpjCFQh4dPLZlPBtdVNyiiiQYWABK2b+ZZsx:RyxVQdohSQNjLh4PLZ5l2XdYWAc/ZZk

MITRE ATT&CK Enterprise v15

Tasks