General

  • Target

    deec76c3a7859de65426539d27340c3d_JaffaCakes118

  • Size

    241KB

  • Sample

    241210-3a6ygavjdw

  • MD5

    deec76c3a7859de65426539d27340c3d

  • SHA1

    3aa135dc3f6f4cca45e8e15a3a23c282fcec9642

  • SHA256

    cd37b9766a41e7471f0aff2c2e6e20e5e15734f3c8f95e3fd6db075456f410a5

  • SHA512

    6affb8f7a4f23656fd8f8ecf9284a39a0749c1a9272291b5d59b962918ced2925099f2480a6799949f4d1bfff8726e38b37288e8d80349de1665e724462e080f

  • SSDEEP

    6144:usY7cf92DU4H9nBn4hbbuVyUWYgH4Va5X3g4sVs:uSFufH1BnOPuPM4OX3gts

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      deec76c3a7859de65426539d27340c3d_JaffaCakes118

    • Size

      241KB

    • MD5

      deec76c3a7859de65426539d27340c3d

    • SHA1

      3aa135dc3f6f4cca45e8e15a3a23c282fcec9642

    • SHA256

      cd37b9766a41e7471f0aff2c2e6e20e5e15734f3c8f95e3fd6db075456f410a5

    • SHA512

      6affb8f7a4f23656fd8f8ecf9284a39a0749c1a9272291b5d59b962918ced2925099f2480a6799949f4d1bfff8726e38b37288e8d80349de1665e724462e080f

    • SSDEEP

      6144:usY7cf92DU4H9nBn4hbbuVyUWYgH4Va5X3g4sVs:uSFufH1BnOPuPM4OX3gts

MITRE ATT&CK Enterprise v15

Tasks