General

  • Target

    d399245c267e70cb685f840d750a1a43_JaffaCakes118

  • Size

    302KB

  • Sample

    241207-zwgnxsypdp

  • MD5

    d399245c267e70cb685f840d750a1a43

  • SHA1

    68f47faf211ce901d595e2b84cd25d9b3ea627e9

  • SHA256

    f1127e3fbde46460c0f4158d4594467d5aa60e5a9f296a7ee5cb2a54229fa8bd

  • SHA512

    418461e098b132bca3cf6750f35eba7d6036167ba40b80c24a02136faaa32be312cf128a57b3d62804975b885982b5dc5354e3462963b46eadf87174c91861af

  • SSDEEP

    6144:Ja9NFt1kJ3Bod/sc84LRabzGoFsYuc+6H3Gu1VPzphKJIJhrxLbnXKKV:Ja9Hi3Bod/sc8yafXFsf2XXzvfNbn6K

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d399245c267e70cb685f840d750a1a43_JaffaCakes118

    • Size

      302KB

    • MD5

      d399245c267e70cb685f840d750a1a43

    • SHA1

      68f47faf211ce901d595e2b84cd25d9b3ea627e9

    • SHA256

      f1127e3fbde46460c0f4158d4594467d5aa60e5a9f296a7ee5cb2a54229fa8bd

    • SHA512

      418461e098b132bca3cf6750f35eba7d6036167ba40b80c24a02136faaa32be312cf128a57b3d62804975b885982b5dc5354e3462963b46eadf87174c91861af

    • SSDEEP

      6144:Ja9NFt1kJ3Bod/sc84LRabzGoFsYuc+6H3Gu1VPzphKJIJhrxLbnXKKV:Ja9Hi3Bod/sc8yafXFsf2XXzvfNbn6K

MITRE ATT&CK Enterprise v15

Tasks