General

  • Target

    f978a3843645d963d9c0985faa37edbf_JaffaCakes118

  • Size

    265KB

  • Sample

    241218-a7sswsvpdx

  • MD5

    f978a3843645d963d9c0985faa37edbf

  • SHA1

    556eaf2e068b10d0f150f5f25d60a944a1a302c9

  • SHA256

    a1e1b78078510d8689c76b05f06b7032487c03cab8f423a26be3bf3510066f37

  • SHA512

    ba4f631f5309c7fece9130bd5b7b1b811aa20dbb85cdc283dedb51c10620e27696f9d2701739e0d6d9f7bde79324a1d7723181606b6fda1b90758444656a40b8

  • SSDEEP

    6144:rH4Tmfn8dMwBnVpV21WBMA41aZcCfZ34+rDLr:r6m85nXV21Wi1aZPh3ZH

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f978a3843645d963d9c0985faa37edbf_JaffaCakes118

    • Size

      265KB

    • MD5

      f978a3843645d963d9c0985faa37edbf

    • SHA1

      556eaf2e068b10d0f150f5f25d60a944a1a302c9

    • SHA256

      a1e1b78078510d8689c76b05f06b7032487c03cab8f423a26be3bf3510066f37

    • SHA512

      ba4f631f5309c7fece9130bd5b7b1b811aa20dbb85cdc283dedb51c10620e27696f9d2701739e0d6d9f7bde79324a1d7723181606b6fda1b90758444656a40b8

    • SSDEEP

      6144:rH4Tmfn8dMwBnVpV21WBMA41aZcCfZ34+rDLr:r6m85nXV21Wi1aZPh3ZH

MITRE ATT&CK Enterprise v15

Tasks