General

  • Target

    JaffaCakes118_6f9e4fa49769b49e231aad023c786cf9

  • Size

    256KB

  • Sample

    250103-zwbsnswlej

  • MD5

    6f9e4fa49769b49e231aad023c786cf9

  • SHA1

    6f3d6d261da2dc968ef0050a2085f61f5ee03ab3

  • SHA256

    5843ee4f943fa4ab06b2d052cc6380d0ea0529f8f77585512554a585f325981e

  • SHA512

    676514f62f2130a1ea59887dd73fa9d939c36f74f6ccee373c0339664a53191f09739e2f52e87da54be023aa65fac11bdd638ef5b54f08ec8b23d3c9d02a709a

  • SSDEEP

    6144:/rbzQpsXzM0cbTz7HlOeciyu+r4WLh07X0YjB6:/Upzz7Zct9r4yi3jA

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_6f9e4fa49769b49e231aad023c786cf9

    • Size

      256KB

    • MD5

      6f9e4fa49769b49e231aad023c786cf9

    • SHA1

      6f3d6d261da2dc968ef0050a2085f61f5ee03ab3

    • SHA256

      5843ee4f943fa4ab06b2d052cc6380d0ea0529f8f77585512554a585f325981e

    • SHA512

      676514f62f2130a1ea59887dd73fa9d939c36f74f6ccee373c0339664a53191f09739e2f52e87da54be023aa65fac11bdd638ef5b54f08ec8b23d3c9d02a709a

    • SSDEEP

      6144:/rbzQpsXzM0cbTz7HlOeciyu+r4WLh07X0YjB6:/Upzz7Zct9r4yi3jA

MITRE ATT&CK Enterprise v15

Tasks