General

  • Target

    bddc0b27e3dd83e10d59e58ff6bf4c88_JaffaCakes118

  • Size

    241KB

  • Sample

    241203-r21d8ayrgt

  • MD5

    bddc0b27e3dd83e10d59e58ff6bf4c88

  • SHA1

    72b5f6e1fabb8c69331cad3ffc7c9ba23937dd73

  • SHA256

    fccfceee8847e3348ffd8b3968649c71cca6f7789864f18349fe1d662a781b07

  • SHA512

    6b919789ef7baa62eb9491060055b585d2ac8df8b2fdf1b3bb93ed31ae4d065751f5e1b8e66744dc763afcec774ef760fda8a28ad1eb2cf5fae96643756650db

  • SSDEEP

    6144:DFUl8v91MKou+h2rJiJ+DJLUE1mGVqZ9e/DLq+Sm+:Da8QKo3+pJLUE5sUvY

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      bddc0b27e3dd83e10d59e58ff6bf4c88_JaffaCakes118

    • Size

      241KB

    • MD5

      bddc0b27e3dd83e10d59e58ff6bf4c88

    • SHA1

      72b5f6e1fabb8c69331cad3ffc7c9ba23937dd73

    • SHA256

      fccfceee8847e3348ffd8b3968649c71cca6f7789864f18349fe1d662a781b07

    • SHA512

      6b919789ef7baa62eb9491060055b585d2ac8df8b2fdf1b3bb93ed31ae4d065751f5e1b8e66744dc763afcec774ef760fda8a28ad1eb2cf5fae96643756650db

    • SSDEEP

      6144:DFUl8v91MKou+h2rJiJ+DJLUE1mGVqZ9e/DLq+Sm+:Da8QKo3+pJLUE5sUvY

MITRE ATT&CK Enterprise v15

Tasks