General

  • Target

    b27d91895cc0907c9d00653c256ad91c_JaffaCakes118

  • Size

    217KB

  • Sample

    241129-t1rf2avrcx

  • MD5

    b27d91895cc0907c9d00653c256ad91c

  • SHA1

    5cfbd2106d58a05dfdfcc69c2e0cdd46cc87a566

  • SHA256

    b5656bc5b4180052d76117389c1e2575af8e4de974da32a330803111a6541ff2

  • SHA512

    dcb84756b7a008a53c3a65bc2fd1447e382f9b7cef4285d01df2cfd1ecd0bdb701bb3e96ce647c880872bc2f3fbca6536896a5e682e672791433231b4d51546b

  • SSDEEP

    6144:hrRaTyDOnlo7eM+mlkWgRXOqobzWjozm2ulYM6Y:JsTbzu1glovW4EH6Y

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      b27d91895cc0907c9d00653c256ad91c_JaffaCakes118

    • Size

      217KB

    • MD5

      b27d91895cc0907c9d00653c256ad91c

    • SHA1

      5cfbd2106d58a05dfdfcc69c2e0cdd46cc87a566

    • SHA256

      b5656bc5b4180052d76117389c1e2575af8e4de974da32a330803111a6541ff2

    • SHA512

      dcb84756b7a008a53c3a65bc2fd1447e382f9b7cef4285d01df2cfd1ecd0bdb701bb3e96ce647c880872bc2f3fbca6536896a5e682e672791433231b4d51546b

    • SSDEEP

      6144:hrRaTyDOnlo7eM+mlkWgRXOqobzWjozm2ulYM6Y:JsTbzu1glovW4EH6Y

MITRE ATT&CK Enterprise v15

Tasks