General

  • Target

    JaffaCakes118_0342eb38e76c7a83c478a0e4fe2f5cc3

  • Size

    258KB

  • Sample

    250112-avhr6ayngq

  • MD5

    0342eb38e76c7a83c478a0e4fe2f5cc3

  • SHA1

    3734cdd8cf1e34c82c08b8a66fea78f776e6b5ca

  • SHA256

    14abf529a65635b72e4b286eb8669e3aa0c89e7b76c6b4a4e1b62c34ffbfcfce

  • SHA512

    a1e748bf1e5ac244f279ab94e0cd3dc0c686c2fd8f43dec9b92afb0ee31e010374287d98cff9423a10a033bf720939bae9d846cda4081cc0d253ffef3fa9ff31

  • SSDEEP

    6144:4yCQplYo1lKQYohSQfDpjCFQh4dPLZlPBtdVNyiiiQYWABK2b+ZZsx:4yxVQdohSQNjLh4PLZ5l2XdYWAc/ZZk

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0342eb38e76c7a83c478a0e4fe2f5cc3

    • Size

      258KB

    • MD5

      0342eb38e76c7a83c478a0e4fe2f5cc3

    • SHA1

      3734cdd8cf1e34c82c08b8a66fea78f776e6b5ca

    • SHA256

      14abf529a65635b72e4b286eb8669e3aa0c89e7b76c6b4a4e1b62c34ffbfcfce

    • SHA512

      a1e748bf1e5ac244f279ab94e0cd3dc0c686c2fd8f43dec9b92afb0ee31e010374287d98cff9423a10a033bf720939bae9d846cda4081cc0d253ffef3fa9ff31

    • SSDEEP

      6144:4yCQplYo1lKQYohSQfDpjCFQh4dPLZlPBtdVNyiiiQYWABK2b+ZZsx:4yxVQdohSQNjLh4PLZ5l2XdYWAc/ZZk

MITRE ATT&CK Enterprise v15

Tasks