General

  • Target

    d2ebe8fcb06183bc2f708d836e3ed085_JaffaCakes118

  • Size

    263KB

  • Sample

    241207-rshg2svmes

  • MD5

    d2ebe8fcb06183bc2f708d836e3ed085

  • SHA1

    47e2d538a0cac8fbe0d1150541a9d1bc52706b4f

  • SHA256

    e6c350cc04d3bd3d1e407aa1611c655c9850530024bcc0580bbad0044caa7978

  • SHA512

    14a0d164f38a3a475c1cf273c2da65762ee3c538a770fc1df22a6ef9b5642764060f027057b5df2c392a09541950d3eeb441a758931dddc838929a4117eef0d9

  • SSDEEP

    3072:AFVcIYf7QdxdG6/mlK9/k2R7hWIQ5ojajUjg7IJp9S+CC+c7AwzcrlCVltWVXHp/:IxJk2RNW37UjP9xscEXltRhn7xgS

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d2ebe8fcb06183bc2f708d836e3ed085_JaffaCakes118

    • Size

      263KB

    • MD5

      d2ebe8fcb06183bc2f708d836e3ed085

    • SHA1

      47e2d538a0cac8fbe0d1150541a9d1bc52706b4f

    • SHA256

      e6c350cc04d3bd3d1e407aa1611c655c9850530024bcc0580bbad0044caa7978

    • SHA512

      14a0d164f38a3a475c1cf273c2da65762ee3c538a770fc1df22a6ef9b5642764060f027057b5df2c392a09541950d3eeb441a758931dddc838929a4117eef0d9

    • SSDEEP

      3072:AFVcIYf7QdxdG6/mlK9/k2R7hWIQ5ojajUjg7IJp9S+CC+c7AwzcrlCVltWVXHp/:IxJk2RNW37UjP9xscEXltRhn7xgS

MITRE ATT&CK Enterprise v15

Tasks