General

  • Target

    cef89bc95aabf37409ac06679d08e0f9_JaffaCakes118

  • Size

    244KB

  • Sample

    241206-zn5qsaxjet

  • MD5

    cef89bc95aabf37409ac06679d08e0f9

  • SHA1

    5ca37d847f2369e17b6dc21749c229a46822e5c7

  • SHA256

    4006acbb7db3a3b9b4c4a3a25fe436d0e5db0c494462d4e190f2590e45e5aead

  • SHA512

    f276e1b7841017a3ab6d98da07384cd08d4a30a986818195ba27af049842459112d1398fdd004f48bb1b4211e14442239ba4aab00b705eea612e7dc626dda940

  • SSDEEP

    6144:4FbKr2b0xskGiLIJ6FpfzSkaQpHFyEoG8i1ni9SBXTH62:4Ur2bpk5IJ6PzSFQpHFLs9MHj

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      cef89bc95aabf37409ac06679d08e0f9_JaffaCakes118

    • Size

      244KB

    • MD5

      cef89bc95aabf37409ac06679d08e0f9

    • SHA1

      5ca37d847f2369e17b6dc21749c229a46822e5c7

    • SHA256

      4006acbb7db3a3b9b4c4a3a25fe436d0e5db0c494462d4e190f2590e45e5aead

    • SHA512

      f276e1b7841017a3ab6d98da07384cd08d4a30a986818195ba27af049842459112d1398fdd004f48bb1b4211e14442239ba4aab00b705eea612e7dc626dda940

    • SSDEEP

      6144:4FbKr2b0xskGiLIJ6FpfzSkaQpHFyEoG8i1ni9SBXTH62:4Ur2bpk5IJ6PzSFQpHFLs9MHj

MITRE ATT&CK Enterprise v15

Tasks