General

  • Target

    a8a49bb2d43a275d2fd4a5e841bc1c4a_JaffaCakes118

  • Size

    272KB

  • Sample

    241127-tlm53azrfx

  • MD5

    a8a49bb2d43a275d2fd4a5e841bc1c4a

  • SHA1

    a591a22d296cb13f46ac7cec238c084fb857d5b4

  • SHA256

    348d8bdef58dde6a58f134fc482027b2bbd2ac51f14822007d08d126f8b41c4b

  • SHA512

    478d6e9d2d1370e35c3c3025e9c04dcc4541d7474ba86a7e0ed0da63990698a95c0ef8ec9cd763e3a09e03bbb793cd203d6d9636829c8fdf1d662ca381b22cc5

  • SSDEEP

    6144:GHOGdQ2AlcOGa9UoUSY/+ADmxHdME+GFtqPofD:Qxd5XlSu+EmtGEfUPofD

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      a8a49bb2d43a275d2fd4a5e841bc1c4a_JaffaCakes118

    • Size

      272KB

    • MD5

      a8a49bb2d43a275d2fd4a5e841bc1c4a

    • SHA1

      a591a22d296cb13f46ac7cec238c084fb857d5b4

    • SHA256

      348d8bdef58dde6a58f134fc482027b2bbd2ac51f14822007d08d126f8b41c4b

    • SHA512

      478d6e9d2d1370e35c3c3025e9c04dcc4541d7474ba86a7e0ed0da63990698a95c0ef8ec9cd763e3a09e03bbb793cd203d6d9636829c8fdf1d662ca381b22cc5

    • SSDEEP

      6144:GHOGdQ2AlcOGa9UoUSY/+ADmxHdME+GFtqPofD:Qxd5XlSu+EmtGEfUPofD

MITRE ATT&CK Enterprise v15

Tasks