General

  • Target

    ffe0597d861a44d0a0fbe2e51cc26db1_JaffaCakes118

  • Size

    307KB

  • Sample

    241219-vgs17awlex

  • MD5

    ffe0597d861a44d0a0fbe2e51cc26db1

  • SHA1

    eb076bf9cfe94766a8338bf6b0f70ab1571ad491

  • SHA256

    ec60823b2e63bda34aa88cfe7d7f2535cd1f051ed89810a7ada6f3a35d6e67b0

  • SHA512

    e909d3a30c35c1b3e3ecc085b046e076a7f390b173b54eee06d700e35d4859395aebe9afa839d0a8b224cef5d7c320bbd2b7b642f6cf0e99eb8f26be7c88df97

  • SSDEEP

    6144:ew9++bLjS10iDOEhAOlj/uuJudyHj+VABWviGvQx:/vS6iDPNptyVAmQx

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      ffe0597d861a44d0a0fbe2e51cc26db1_JaffaCakes118

    • Size

      307KB

    • MD5

      ffe0597d861a44d0a0fbe2e51cc26db1

    • SHA1

      eb076bf9cfe94766a8338bf6b0f70ab1571ad491

    • SHA256

      ec60823b2e63bda34aa88cfe7d7f2535cd1f051ed89810a7ada6f3a35d6e67b0

    • SHA512

      e909d3a30c35c1b3e3ecc085b046e076a7f390b173b54eee06d700e35d4859395aebe9afa839d0a8b224cef5d7c320bbd2b7b642f6cf0e99eb8f26be7c88df97

    • SSDEEP

      6144:ew9++bLjS10iDOEhAOlj/uuJudyHj+VABWviGvQx:/vS6iDPNptyVAmQx

MITRE ATT&CK Enterprise v15

Tasks