General

  • Target

    dedf8b417b651aba5136e9620b588f8a_JaffaCakes118

  • Size

    263KB

  • Sample

    241210-21re2aymgp

  • MD5

    dedf8b417b651aba5136e9620b588f8a

  • SHA1

    630c8af1cf59b0d0a42e920d00ef49acf1d198a9

  • SHA256

    4c74e94a794e583599c91e242cd5d99175aae0f94511889be7d2738633f92ed3

  • SHA512

    5b55905d275bf7aada966e0d1c7a5fa5eddf98f67c64492704571f811a331a8808a9b660ce47647fdda7857ffb82e40193d85075e644fb6d93a12a80d825f604

  • SSDEEP

    6144:/9ooxmU1fIhiEELvPN3gt4eO3voL6to4dtUBrUHF:/9HX1fwavPNQOeO3vqUn3UhcF

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      dedf8b417b651aba5136e9620b588f8a_JaffaCakes118

    • Size

      263KB

    • MD5

      dedf8b417b651aba5136e9620b588f8a

    • SHA1

      630c8af1cf59b0d0a42e920d00ef49acf1d198a9

    • SHA256

      4c74e94a794e583599c91e242cd5d99175aae0f94511889be7d2738633f92ed3

    • SHA512

      5b55905d275bf7aada966e0d1c7a5fa5eddf98f67c64492704571f811a331a8808a9b660ce47647fdda7857ffb82e40193d85075e644fb6d93a12a80d825f604

    • SSDEEP

      6144:/9ooxmU1fIhiEELvPN3gt4eO3voL6to4dtUBrUHF:/9HX1fwavPNQOeO3vqUn3UhcF

MITRE ATT&CK Enterprise v15

Tasks