General

  • Target

    JaffaCakes118_0f6d2f44b77a5268441f5ca4a0db2daa

  • Size

    250KB

  • Sample

    250112-qd8v1stkf1

  • MD5

    0f6d2f44b77a5268441f5ca4a0db2daa

  • SHA1

    ad3a6fa50f66617b749aef299dc655258977ddbd

  • SHA256

    2b803cab856e13b24a499a3f781c014d6c8e2663dbc8eac74a41f3e87a0cf7df

  • SHA512

    c09a21696bd755fac70840ce083a2f2530256400193f2707b27a8d91d8972e56c3d6b942ff6c96d3d0da4967ede26b3838531e1eaa3ce89f3490a1f1e448e82d

  • SSDEEP

    3072:NGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:DXxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0f6d2f44b77a5268441f5ca4a0db2daa

    • Size

      250KB

    • MD5

      0f6d2f44b77a5268441f5ca4a0db2daa

    • SHA1

      ad3a6fa50f66617b749aef299dc655258977ddbd

    • SHA256

      2b803cab856e13b24a499a3f781c014d6c8e2663dbc8eac74a41f3e87a0cf7df

    • SHA512

      c09a21696bd755fac70840ce083a2f2530256400193f2707b27a8d91d8972e56c3d6b942ff6c96d3d0da4967ede26b3838531e1eaa3ce89f3490a1f1e448e82d

    • SSDEEP

      3072:NGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:DXxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

MITRE ATT&CK Enterprise v15

Tasks