General

  • Target

    f3fdf40cebdc6e734d12e9a8dc8446e5_JaffaCakes118

  • Size

    285KB

  • Sample

    241215-pmrgnawkgk

  • MD5

    f3fdf40cebdc6e734d12e9a8dc8446e5

  • SHA1

    02760abc8a2d613f5add77f9f9ff130e4b9856ec

  • SHA256

    e161a33989b0fb6194eb351e2e37f2ac2bba6c61978df71e8bd8d44227211866

  • SHA512

    c2a5cfe389e13cb47e2aa301a7e3abb231e570ee3f6988cf22fd5d22bf0773bb670d3c60398b98ca681ff7da16684651b2ee324b3f6f97fb12b6768b1dba74de

  • SSDEEP

    6144:KKMmlhXmJQmeWQnfojSdWir/OUxhTi7F045x6FECHuObckrSF:yJZ0Wk/FUBZCHuphF

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f3fdf40cebdc6e734d12e9a8dc8446e5_JaffaCakes118

    • Size

      285KB

    • MD5

      f3fdf40cebdc6e734d12e9a8dc8446e5

    • SHA1

      02760abc8a2d613f5add77f9f9ff130e4b9856ec

    • SHA256

      e161a33989b0fb6194eb351e2e37f2ac2bba6c61978df71e8bd8d44227211866

    • SHA512

      c2a5cfe389e13cb47e2aa301a7e3abb231e570ee3f6988cf22fd5d22bf0773bb670d3c60398b98ca681ff7da16684651b2ee324b3f6f97fb12b6768b1dba74de

    • SSDEEP

      6144:KKMmlhXmJQmeWQnfojSdWir/OUxhTi7F045x6FECHuObckrSF:yJZ0Wk/FUBZCHuphF

MITRE ATT&CK Enterprise v15

Tasks