General

  • Target

    JaffaCakes118_631f8fc95c3acc2edfd81bb56fae7810

  • Size

    261KB

  • Sample

    250102-gvylyazlaq

  • MD5

    631f8fc95c3acc2edfd81bb56fae7810

  • SHA1

    ae447234a8e47d7c39d219abb864fed9e10a5bf3

  • SHA256

    b656aacd606a1ffd131caa6e944ddadf352fd2fd8a06a4ca6aa718d4ab8432d9

  • SHA512

    1aad3a5d90b79ddcbcfe1e45792fcfc4cc2f7294b91a9fdf32a1141ffb893fefbf6936de5469b05b92a3956fdbfb64cd7e7fb1262e450177889103e889e586af

  • SSDEEP

    6144:2sMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:2DPSZrEtPU4Nmn08r2QnjR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_631f8fc95c3acc2edfd81bb56fae7810

    • Size

      261KB

    • MD5

      631f8fc95c3acc2edfd81bb56fae7810

    • SHA1

      ae447234a8e47d7c39d219abb864fed9e10a5bf3

    • SHA256

      b656aacd606a1ffd131caa6e944ddadf352fd2fd8a06a4ca6aa718d4ab8432d9

    • SHA512

      1aad3a5d90b79ddcbcfe1e45792fcfc4cc2f7294b91a9fdf32a1141ffb893fefbf6936de5469b05b92a3956fdbfb64cd7e7fb1262e450177889103e889e586af

    • SSDEEP

      6144:2sMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:2DPSZrEtPU4Nmn08r2QnjR

MITRE ATT&CK Enterprise v15

Tasks