General

  • Target

    d38130f08ccc59b90c854f4d3870e082_JaffaCakes118

  • Size

    253KB

  • Sample

    241207-zdd53ssmbv

  • MD5

    d38130f08ccc59b90c854f4d3870e082

  • SHA1

    0a2a41598b6bcbdc49301650a7d710083acaceb0

  • SHA256

    cb0fcf33cec15e31f9bfda2bcea333ef4577a69e359d90d5deec4a539f49b80c

  • SHA512

    bafcbb7f1ac222585d44352207362147eb8949b551e8b1e94442fbfe1bc18b6bd8b3c64e93db75f903ae433efb7004044d9345e2cc6067607e3d2f5fbe0a56d9

  • SSDEEP

    6144:g3UaFS58Q+Sij0nVGtnQfNmPvwQ5rQidwByQotV:g35E2FjTnOCIQ5rn3QoP

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d38130f08ccc59b90c854f4d3870e082_JaffaCakes118

    • Size

      253KB

    • MD5

      d38130f08ccc59b90c854f4d3870e082

    • SHA1

      0a2a41598b6bcbdc49301650a7d710083acaceb0

    • SHA256

      cb0fcf33cec15e31f9bfda2bcea333ef4577a69e359d90d5deec4a539f49b80c

    • SHA512

      bafcbb7f1ac222585d44352207362147eb8949b551e8b1e94442fbfe1bc18b6bd8b3c64e93db75f903ae433efb7004044d9345e2cc6067607e3d2f5fbe0a56d9

    • SSDEEP

      6144:g3UaFS58Q+Sij0nVGtnQfNmPvwQ5rQidwByQotV:g35E2FjTnOCIQ5rn3QoP

MITRE ATT&CK Enterprise v15

Tasks