General

  • Target

    f18b3c320f5a42fb861b69ff76e94874_JaffaCakes118

  • Size

    237KB

  • Sample

    241215-baz2da1mcj

  • MD5

    f18b3c320f5a42fb861b69ff76e94874

  • SHA1

    f6a18d4a4225445fe6d6c9290f15202a94b9387c

  • SHA256

    ce8f704782e78d1fc3eb9f7ee6f24bf45eb81881166be1b99cdb3bab540a89ea

  • SHA512

    5f6f9c062de7fce507aec041c609b02a1112efd7f87de68d2ff067e5d6f3b392559a4306152ba60604fefd0933090ae0f736cd767a994e5cfc6cda18306eac5b

  • SSDEEP

    6144:W+NuDTPypWlWNr0viNy8ZnR5oRMfpJaFNezr8:WcunapWYBZERM8KA

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      f18b3c320f5a42fb861b69ff76e94874_JaffaCakes118

    • Size

      237KB

    • MD5

      f18b3c320f5a42fb861b69ff76e94874

    • SHA1

      f6a18d4a4225445fe6d6c9290f15202a94b9387c

    • SHA256

      ce8f704782e78d1fc3eb9f7ee6f24bf45eb81881166be1b99cdb3bab540a89ea

    • SHA512

      5f6f9c062de7fce507aec041c609b02a1112efd7f87de68d2ff067e5d6f3b392559a4306152ba60604fefd0933090ae0f736cd767a994e5cfc6cda18306eac5b

    • SSDEEP

      6144:W+NuDTPypWlWNr0viNy8ZnR5oRMfpJaFNezr8:WcunapWYBZERM8KA

MITRE ATT&CK Enterprise v15

Tasks