General

  • Target

    JaffaCakes118_786202e85971fe480f5134f2e7f05478

  • Size

    210KB

  • Sample

    250104-h3xv2synbx

  • MD5

    786202e85971fe480f5134f2e7f05478

  • SHA1

    468380670cd00afe4053aba20adea53954df5004

  • SHA256

    0b225f1302d65e3f342bdf13a2bcba5ca82873d03a90355b4e048c623d298bd0

  • SHA512

    a6fc4b43ca1d211692d0db4260b858951c09fd3920bcb3312ac1e66011f727b305662f1a569e86b76b1b57ac2b47e1313fcf068cc3b03cc9a20016259d2ee725

  • SSDEEP

    6144:T7xbm2ovXZr6nwnkrJjA1uWuS05Nw3rlkq9xPgLO:T7xkQrJ2oEOWqC

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_786202e85971fe480f5134f2e7f05478

    • Size

      210KB

    • MD5

      786202e85971fe480f5134f2e7f05478

    • SHA1

      468380670cd00afe4053aba20adea53954df5004

    • SHA256

      0b225f1302d65e3f342bdf13a2bcba5ca82873d03a90355b4e048c623d298bd0

    • SHA512

      a6fc4b43ca1d211692d0db4260b858951c09fd3920bcb3312ac1e66011f727b305662f1a569e86b76b1b57ac2b47e1313fcf068cc3b03cc9a20016259d2ee725

    • SSDEEP

      6144:T7xbm2ovXZr6nwnkrJjA1uWuS05Nw3rlkq9xPgLO:T7xkQrJ2oEOWqC

MITRE ATT&CK Enterprise v15

Tasks