General

  • Target

    JaffaCakes118_656ca4d3f295e7b6c2d00ef6590ddd39

  • Size

    263KB

  • Sample

    250102-qp5bzawnbr

  • MD5

    656ca4d3f295e7b6c2d00ef6590ddd39

  • SHA1

    addb4b317f1f741ba8ae671a778c844e0512606d

  • SHA256

    9f33182bcb5883bda1d79b473f4bdebfbc2d365d1b00010defffac3e6692385b

  • SHA512

    49982d466eb65691e59769d72e934b2f1f870a9b93196da3cfaa689b1481c56f03f179634b24f4d62baf409de7927088713e317e68b46c5eefdd72579b16de26

  • SSDEEP

    6144:QhPZy+chYf9vFAQewiHStKoOZ3j7BAkQd/b+TGCokrArDP6c:YBf9FLlpOJxQdjlD7

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_656ca4d3f295e7b6c2d00ef6590ddd39

    • Size

      263KB

    • MD5

      656ca4d3f295e7b6c2d00ef6590ddd39

    • SHA1

      addb4b317f1f741ba8ae671a778c844e0512606d

    • SHA256

      9f33182bcb5883bda1d79b473f4bdebfbc2d365d1b00010defffac3e6692385b

    • SHA512

      49982d466eb65691e59769d72e934b2f1f870a9b93196da3cfaa689b1481c56f03f179634b24f4d62baf409de7927088713e317e68b46c5eefdd72579b16de26

    • SSDEEP

      6144:QhPZy+chYf9vFAQewiHStKoOZ3j7BAkQd/b+TGCokrArDP6c:YBf9FLlpOJxQdjlD7

MITRE ATT&CK Enterprise v15

Tasks