General

  • Target

    a949529c84459a3db45a88d8a74fd188_JaffaCakes118

  • Size

    249KB

  • Sample

    241127-x2fmpssphp

  • MD5

    a949529c84459a3db45a88d8a74fd188

  • SHA1

    d8914f7ca43b3a7f18adffe265f5f37759d4e8d2

  • SHA256

    bd26a5a14cf08436e125c8b9f6acaf3d882be1263150f1768dd26e1f641e11ff

  • SHA512

    8df6e46998f9b53db4f832c922be35f09ea073db55d9e82af1d5960bbb27879d9b3f7bfb44c20f5f92d69445fe6fcbed82d7d76fd844cdd0da9aa6553e2e7354

  • SSDEEP

    3072:NgPSFFYQ9G3KFASx2rmBMbOj/yFED2BjUW36AuK4ZGuUXR4wql8GOl+TSuFuVPEc:uwFYQk02gvjKFED2Bo3ZGuKtJGAHUvbQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      a949529c84459a3db45a88d8a74fd188_JaffaCakes118

    • Size

      249KB

    • MD5

      a949529c84459a3db45a88d8a74fd188

    • SHA1

      d8914f7ca43b3a7f18adffe265f5f37759d4e8d2

    • SHA256

      bd26a5a14cf08436e125c8b9f6acaf3d882be1263150f1768dd26e1f641e11ff

    • SHA512

      8df6e46998f9b53db4f832c922be35f09ea073db55d9e82af1d5960bbb27879d9b3f7bfb44c20f5f92d69445fe6fcbed82d7d76fd844cdd0da9aa6553e2e7354

    • SSDEEP

      3072:NgPSFFYQ9G3KFASx2rmBMbOj/yFED2BjUW36AuK4ZGuUXR4wql8GOl+TSuFuVPEc:uwFYQk02gvjKFED2Bo3ZGuKtJGAHUvbQ

MITRE ATT&CK Enterprise v15

Tasks