General

  • Target

    f2c080afbc93050f8e33ee20b97e5d14_JaffaCakes118

  • Size

    252KB

  • Sample

    241215-hed32awqcy

  • MD5

    f2c080afbc93050f8e33ee20b97e5d14

  • SHA1

    2907be4d7517d063370f36febfb040b3dfc4f360

  • SHA256

    e6bcbd6d8cf5c92393030924a1edba9b4bd620c344703f9bbce4f7f63157f4e0

  • SHA512

    e22652d95ecc99b2288225d8d22b621df382963c1b264138b6f97b32a74a1c336224e4e10600e3ae29b049ba88512f7819ff34703fd3d66a76d9de1cae4f0c55

  • SSDEEP

    6144:Scjr0I/BsJpbrD/GLswD3LD6a5VAAnK0KRp7i:Scv01brbGLspa0f0KRp

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f2c080afbc93050f8e33ee20b97e5d14_JaffaCakes118

    • Size

      252KB

    • MD5

      f2c080afbc93050f8e33ee20b97e5d14

    • SHA1

      2907be4d7517d063370f36febfb040b3dfc4f360

    • SHA256

      e6bcbd6d8cf5c92393030924a1edba9b4bd620c344703f9bbce4f7f63157f4e0

    • SHA512

      e22652d95ecc99b2288225d8d22b621df382963c1b264138b6f97b32a74a1c336224e4e10600e3ae29b049ba88512f7819ff34703fd3d66a76d9de1cae4f0c55

    • SSDEEP

      6144:Scjr0I/BsJpbrD/GLswD3LD6a5VAAnK0KRp7i:Scv01brbGLspa0f0KRp

MITRE ATT&CK Enterprise v15

Tasks