General

  • Target

    d67eaec6c1a227e6d87f783a586509f2_JaffaCakes118

  • Size

    307KB

  • Sample

    241208-l5jmzszqas

  • MD5

    d67eaec6c1a227e6d87f783a586509f2

  • SHA1

    f1f3fa6fb253511d6521f712805fbfe1be75ea7f

  • SHA256

    5b01eb0e020d45ae5e32cb467da96fe3628fdf95dfa2bc331b2e318fe6f17143

  • SHA512

    6888c584b9fd90a1dc67157508a93247b61db5aa7e92e925f8f65fcb241e7331f16d06bd31a698e2b650fdb2a6ebe109bea30f78a778a0d5029bd5bf84f93486

  • SSDEEP

    6144:Lw9++bLjS10iDOEhAOlj/uuJudyHj+VABWviGvQx:wvS6iDPNptyVAmQx

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d67eaec6c1a227e6d87f783a586509f2_JaffaCakes118

    • Size

      307KB

    • MD5

      d67eaec6c1a227e6d87f783a586509f2

    • SHA1

      f1f3fa6fb253511d6521f712805fbfe1be75ea7f

    • SHA256

      5b01eb0e020d45ae5e32cb467da96fe3628fdf95dfa2bc331b2e318fe6f17143

    • SHA512

      6888c584b9fd90a1dc67157508a93247b61db5aa7e92e925f8f65fcb241e7331f16d06bd31a698e2b650fdb2a6ebe109bea30f78a778a0d5029bd5bf84f93486

    • SSDEEP

      6144:Lw9++bLjS10iDOEhAOlj/uuJudyHj+VABWviGvQx:wvS6iDPNptyVAmQx

MITRE ATT&CK Enterprise v15

Tasks