General

  • Target

    faf4d9905fd9efcbcf1441d5fcdb8e3c_JaffaCakes118

  • Size

    243KB

  • Sample

    241218-k72e5stqdn

  • MD5

    faf4d9905fd9efcbcf1441d5fcdb8e3c

  • SHA1

    a209dbd7a63071f1f7c787826c7245202c1de179

  • SHA256

    3669c547537e1228f997bd13f551a0a57733a216258cc3d5106085036ea55030

  • SHA512

    1f8dd99b8c98d3f1a126e15c71a910b0f3ac64fdb6dead7ce7975de8027960a361a97dd1a0cbbee7ef32993e30893b4fdaac7d8f4bb483399ff5bb47ede29c2e

  • SSDEEP

    3072:dpUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:dpUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      faf4d9905fd9efcbcf1441d5fcdb8e3c_JaffaCakes118

    • Size

      243KB

    • MD5

      faf4d9905fd9efcbcf1441d5fcdb8e3c

    • SHA1

      a209dbd7a63071f1f7c787826c7245202c1de179

    • SHA256

      3669c547537e1228f997bd13f551a0a57733a216258cc3d5106085036ea55030

    • SHA512

      1f8dd99b8c98d3f1a126e15c71a910b0f3ac64fdb6dead7ce7975de8027960a361a97dd1a0cbbee7ef32993e30893b4fdaac7d8f4bb483399ff5bb47ede29c2e

    • SSDEEP

      3072:dpUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:dpUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

MITRE ATT&CK Enterprise v15

Tasks