General

  • Target

    c0651cd68cad3b8077135789bdf89331_JaffaCakes118

  • Size

    275KB

  • Sample

    241204-cywvassnck

  • MD5

    c0651cd68cad3b8077135789bdf89331

  • SHA1

    391f04b4c66a29b90184dd54250f8285bec6f01e

  • SHA256

    fb09beb8af86dc86ee5ef5e6da24166297cc843f959575a81ba5d370f429a795

  • SHA512

    ff328b1d9342a8c6a52b6d39f8043dab46912cd55d1c4d6b7e9c0afe7d3d462548d1ff3902c03030316dab25c6eee6188cc8735e64a9815760834cbf99c0c615

  • SSDEEP

    6144:/N/HLlhG/8jNQMyTfyZ1wafKa7Rs7PuJK6:/NpdNBEeK43

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      c0651cd68cad3b8077135789bdf89331_JaffaCakes118

    • Size

      275KB

    • MD5

      c0651cd68cad3b8077135789bdf89331

    • SHA1

      391f04b4c66a29b90184dd54250f8285bec6f01e

    • SHA256

      fb09beb8af86dc86ee5ef5e6da24166297cc843f959575a81ba5d370f429a795

    • SHA512

      ff328b1d9342a8c6a52b6d39f8043dab46912cd55d1c4d6b7e9c0afe7d3d462548d1ff3902c03030316dab25c6eee6188cc8735e64a9815760834cbf99c0c615

    • SSDEEP

      6144:/N/HLlhG/8jNQMyTfyZ1wafKa7Rs7PuJK6:/NpdNBEeK43

MITRE ATT&CK Enterprise v15

Tasks