General

  • Target

    JaffaCakes118_7a273f678e7013e8dbe94cbbc8fb4642

  • Size

    270KB

  • Sample

    250104-rmlbrasqh1

  • MD5

    7a273f678e7013e8dbe94cbbc8fb4642

  • SHA1

    4f88926819c3f2e8b2655b33b9b72bd2bb4d4b91

  • SHA256

    3048cf606ed9caa66911f8d475f88e0f38dd54a7a8079d60027d9ba2f7ce6487

  • SHA512

    c045ccb396fe1b6f49309cf4907c0960fffff79c7a8c82bc76bd34c986daeeddb6332b9a41a439fe7e4c4190b748b864ca933b62da9093672c355f6921920e81

  • SSDEEP

    6144:0xgW3S0nqUQFqyU+hp1CTJRxoB53JYRf/0ml:NWC0nqUNc1CRor3JEj

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_7a273f678e7013e8dbe94cbbc8fb4642

    • Size

      270KB

    • MD5

      7a273f678e7013e8dbe94cbbc8fb4642

    • SHA1

      4f88926819c3f2e8b2655b33b9b72bd2bb4d4b91

    • SHA256

      3048cf606ed9caa66911f8d475f88e0f38dd54a7a8079d60027d9ba2f7ce6487

    • SHA512

      c045ccb396fe1b6f49309cf4907c0960fffff79c7a8c82bc76bd34c986daeeddb6332b9a41a439fe7e4c4190b748b864ca933b62da9093672c355f6921920e81

    • SSDEEP

      6144:0xgW3S0nqUQFqyU+hp1CTJRxoB53JYRf/0ml:NWC0nqUNc1CRor3JEj

MITRE ATT&CK Enterprise v15

Tasks