General

  • Target

    ab29860dfb7d4b6a06f1a6b28f91185b_JaffaCakes118

  • Size

    250KB

  • Sample

    241128-f8f4daxmay

  • MD5

    ab29860dfb7d4b6a06f1a6b28f91185b

  • SHA1

    9c45752d036f86a855be5880a5623000eea45fce

  • SHA256

    40dd105b7750e806e62d67f5e36ac6c040fd0de4fcd7c09ebf322226ac293375

  • SHA512

    f00805eb3a5c63e6d19d0a19ba0397232125c72693e27502f1d5b0bc19357d47bc3787982d136c6f863d58c1d24db396f8279f608aa123b7a0503dce3af06663

  • SSDEEP

    6144:ZdMNt9jEJCPBwnOOQJEWLOxA2322oVvZMy0:q9oJIQOxOxjo/l0

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      ab29860dfb7d4b6a06f1a6b28f91185b_JaffaCakes118

    • Size

      250KB

    • MD5

      ab29860dfb7d4b6a06f1a6b28f91185b

    • SHA1

      9c45752d036f86a855be5880a5623000eea45fce

    • SHA256

      40dd105b7750e806e62d67f5e36ac6c040fd0de4fcd7c09ebf322226ac293375

    • SHA512

      f00805eb3a5c63e6d19d0a19ba0397232125c72693e27502f1d5b0bc19357d47bc3787982d136c6f863d58c1d24db396f8279f608aa123b7a0503dce3af06663

    • SSDEEP

      6144:ZdMNt9jEJCPBwnOOQJEWLOxA2322oVvZMy0:q9oJIQOxOxjo/l0

MITRE ATT&CK Enterprise v15

Tasks