General

  • Target

    d8944725f802d4e2644afdaed43f5e3f_JaffaCakes118

  • Size

    286KB

  • Sample

    241209-jlzhzswkgl

  • MD5

    d8944725f802d4e2644afdaed43f5e3f

  • SHA1

    12856177b5975c667afb7d2d41a8847da8c04205

  • SHA256

    2f5f43b57f436995a4eae1f9d6b9b2e739a578311bc5862eaddedec8ac542182

  • SHA512

    6f198d2cd20861165b72341c1e77c23a5858dd75983ca7060e85533e3bb630e1a68b0f48705ce95ecc7530a5ae8931ce690148f3ead7c58bb834c47f60b03a45

  • SSDEEP

    6144:RauQjGoe7VJsRS7Nrm3k1A/DSVRClM/3CQWbc6GycA8CEQZLmYwNb:RadGo0ISrmCAOVhByc5uZLmvNb

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d8944725f802d4e2644afdaed43f5e3f_JaffaCakes118

    • Size

      286KB

    • MD5

      d8944725f802d4e2644afdaed43f5e3f

    • SHA1

      12856177b5975c667afb7d2d41a8847da8c04205

    • SHA256

      2f5f43b57f436995a4eae1f9d6b9b2e739a578311bc5862eaddedec8ac542182

    • SHA512

      6f198d2cd20861165b72341c1e77c23a5858dd75983ca7060e85533e3bb630e1a68b0f48705ce95ecc7530a5ae8931ce690148f3ead7c58bb834c47f60b03a45

    • SSDEEP

      6144:RauQjGoe7VJsRS7Nrm3k1A/DSVRClM/3CQWbc6GycA8CEQZLmYwNb:RadGo0ISrmCAOVhByc5uZLmvNb

MITRE ATT&CK Enterprise v15

Tasks