General

  • Target

    ff096ff7f5057ea17ae9987dbba44f4d_JaffaCakes118

  • Size

    254KB

  • Sample

    241219-jnlpxawmfq

  • MD5

    ff096ff7f5057ea17ae9987dbba44f4d

  • SHA1

    c49d680025079a78cefadb027880d62ae4abfb8f

  • SHA256

    eab251da7847c934aabade2a9ca6209bbfdc833370420d9a96003f052330fd6b

  • SHA512

    c18ee29dae402895d82c9fab2d090dd76c3f25e64ac65725b5552c6cd2187dc497011336ca5b7f63ace024910be8a25d3640b542889afe566c565f3eb3660c2b

  • SSDEEP

    3072:+/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:wwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      ff096ff7f5057ea17ae9987dbba44f4d_JaffaCakes118

    • Size

      254KB

    • MD5

      ff096ff7f5057ea17ae9987dbba44f4d

    • SHA1

      c49d680025079a78cefadb027880d62ae4abfb8f

    • SHA256

      eab251da7847c934aabade2a9ca6209bbfdc833370420d9a96003f052330fd6b

    • SHA512

      c18ee29dae402895d82c9fab2d090dd76c3f25e64ac65725b5552c6cd2187dc497011336ca5b7f63ace024910be8a25d3640b542889afe566c565f3eb3660c2b

    • SSDEEP

      3072:+/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:wwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

MITRE ATT&CK Enterprise v15

Tasks