General

  • Target

    ddab5ae37cf86cab319f843c3fdc5bbe_JaffaCakes118

  • Size

    262KB

  • Sample

    241210-jdb3qatnep

  • MD5

    ddab5ae37cf86cab319f843c3fdc5bbe

  • SHA1

    a7b14bfb91875d45958ab5251ef1d1c4d567e9b1

  • SHA256

    f4ea6edbbb321023da12cb7d4af958deb4b658d78161498c82ff9583a6e76d61

  • SHA512

    112de04d6a45699999d227675841b07802eb64ce8cc04f327df25244ff7f97916be40fbe199f1402a57938aaa8b72d46de818403beba9bdc43b4559aa89ea4cb

  • SSDEEP

    3072:e8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:VWQ6HWLs+Eum1RNrkCqddcGRW4P

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      ddab5ae37cf86cab319f843c3fdc5bbe_JaffaCakes118

    • Size

      262KB

    • MD5

      ddab5ae37cf86cab319f843c3fdc5bbe

    • SHA1

      a7b14bfb91875d45958ab5251ef1d1c4d567e9b1

    • SHA256

      f4ea6edbbb321023da12cb7d4af958deb4b658d78161498c82ff9583a6e76d61

    • SHA512

      112de04d6a45699999d227675841b07802eb64ce8cc04f327df25244ff7f97916be40fbe199f1402a57938aaa8b72d46de818403beba9bdc43b4559aa89ea4cb

    • SSDEEP

      3072:e8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:VWQ6HWLs+Eum1RNrkCqddcGRW4P

MITRE ATT&CK Enterprise v15

Tasks