General

  • Target

    cac6b968d07eef4c2cbbd9164205b3b0_JaffaCakes118

  • Size

    248KB

  • Sample

    241206-dsw4jstmbj

  • MD5

    cac6b968d07eef4c2cbbd9164205b3b0

  • SHA1

    1c47a5ec5b3458f7c8df4877faaab31f2fdd9042

  • SHA256

    dd5b7ba5579e7bf09ae215809692832fdaa42cc63d7d2a62a0c396ba3613bb81

  • SHA512

    01396b9efe9e076c6a590229acd45724f18c819f75586e1b3a807e09a04857beea783ac57be7297a1d2e80943493eb08e36f8a339aa599cdb2a00ddb3d24fc03

  • SSDEEP

    6144:qwYBm0DCUUVpUWdtvP5RvdFlwiWkOKPIoil:qwYBBDCUNQjFlhW3KPID

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      cac6b968d07eef4c2cbbd9164205b3b0_JaffaCakes118

    • Size

      248KB

    • MD5

      cac6b968d07eef4c2cbbd9164205b3b0

    • SHA1

      1c47a5ec5b3458f7c8df4877faaab31f2fdd9042

    • SHA256

      dd5b7ba5579e7bf09ae215809692832fdaa42cc63d7d2a62a0c396ba3613bb81

    • SHA512

      01396b9efe9e076c6a590229acd45724f18c819f75586e1b3a807e09a04857beea783ac57be7297a1d2e80943493eb08e36f8a339aa599cdb2a00ddb3d24fc03

    • SSDEEP

      6144:qwYBm0DCUUVpUWdtvP5RvdFlwiWkOKPIoil:qwYBBDCUNQjFlhW3KPID

MITRE ATT&CK Enterprise v15

Tasks