General

  • Target

    c470d0cf16239cd20a263a68d5da058f_JaffaCakes118

  • Size

    265KB

  • Sample

    241204-z7r9ssxpbp

  • MD5

    c470d0cf16239cd20a263a68d5da058f

  • SHA1

    00cceb84a5e1dd3ad58d8bafd50c096f309683e0

  • SHA256

    d24577ad07a73e71e0915b5344983c7a2d75615e208877c784ff4b4b9c4ccb4b

  • SHA512

    4e82dfd53a3d84fa2744b5a0dc7610348931f754ad85491bf7a4940d34653955167f19bc70971257606d3ebc18ce8384f1a2bb0dea9c9e9f23ce45dbc22ffee6

  • SSDEEP

    6144:8H4Tmfn8dMwBnVpV21WBMA41aZcCfZ34+rDLr:86m85nXV21Wi1aZPh3ZH

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      c470d0cf16239cd20a263a68d5da058f_JaffaCakes118

    • Size

      265KB

    • MD5

      c470d0cf16239cd20a263a68d5da058f

    • SHA1

      00cceb84a5e1dd3ad58d8bafd50c096f309683e0

    • SHA256

      d24577ad07a73e71e0915b5344983c7a2d75615e208877c784ff4b4b9c4ccb4b

    • SHA512

      4e82dfd53a3d84fa2744b5a0dc7610348931f754ad85491bf7a4940d34653955167f19bc70971257606d3ebc18ce8384f1a2bb0dea9c9e9f23ce45dbc22ffee6

    • SSDEEP

      6144:8H4Tmfn8dMwBnVpV21WBMA41aZcCfZ34+rDLr:86m85nXV21Wi1aZPh3ZH

MITRE ATT&CK Enterprise v15

Tasks