General

  • Target

    f8ed30e4a37ce22826a8698eeaaac42a_JaffaCakes118

  • Size

    261KB

  • Sample

    241216-n92qga1kcq

  • MD5

    f8ed30e4a37ce22826a8698eeaaac42a

  • SHA1

    dd6b782578e3747e0bbfca5513e2ee76c01cab4b

  • SHA256

    0c35798e10c5d1fd5e9ce2489a413a58c72ece346a1b32c4784b2853eaeff70c

  • SHA512

    41033b32f49012564f666c09c52d4218b5db0e80b1f2fd7239d585915da75a85a109d450ce43d7b9db1ab146d0e1c987a35c9dde744f726df27d200341df2ad6

  • SSDEEP

    6144:IayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:yCua88SEjbEwvpZBZQfZhh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f8ed30e4a37ce22826a8698eeaaac42a_JaffaCakes118

    • Size

      261KB

    • MD5

      f8ed30e4a37ce22826a8698eeaaac42a

    • SHA1

      dd6b782578e3747e0bbfca5513e2ee76c01cab4b

    • SHA256

      0c35798e10c5d1fd5e9ce2489a413a58c72ece346a1b32c4784b2853eaeff70c

    • SHA512

      41033b32f49012564f666c09c52d4218b5db0e80b1f2fd7239d585915da75a85a109d450ce43d7b9db1ab146d0e1c987a35c9dde744f726df27d200341df2ad6

    • SSDEEP

      6144:IayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:yCua88SEjbEwvpZBZQfZhh

MITRE ATT&CK Enterprise v15

Tasks