General

  • Target

    JaffaCakes118_137c4629172697083f3e8766af6be40a

  • Size

    258KB

  • Sample

    250112-t91q3asqcr

  • MD5

    137c4629172697083f3e8766af6be40a

  • SHA1

    24efd92fca56b1b1e25be81b929b2aa3feaaac08

  • SHA256

    13ca720df2df97a31e45a13c5736a107c7db8a03b12484e49180913cbfbeb65a

  • SHA512

    0accd99d05c8a4e6c39f7d9cd9874f2767a90e638849fef03f36da96c5bde0512718ccefe6d7bbe1e005b14240dfd94fbf8fa2265d3940198f18d4283929bb12

  • SSDEEP

    6144:wyCQplYo1lKQYohSQfDpjCFQh4dPLZlPBtdVNyiiiQYWABK2b+ZZsx:wyxVQdohSQNjLh4PLZ5l2XdYWAc/ZZk

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_137c4629172697083f3e8766af6be40a

    • Size

      258KB

    • MD5

      137c4629172697083f3e8766af6be40a

    • SHA1

      24efd92fca56b1b1e25be81b929b2aa3feaaac08

    • SHA256

      13ca720df2df97a31e45a13c5736a107c7db8a03b12484e49180913cbfbeb65a

    • SHA512

      0accd99d05c8a4e6c39f7d9cd9874f2767a90e638849fef03f36da96c5bde0512718ccefe6d7bbe1e005b14240dfd94fbf8fa2265d3940198f18d4283929bb12

    • SSDEEP

      6144:wyCQplYo1lKQYohSQfDpjCFQh4dPLZlPBtdVNyiiiQYWABK2b+ZZsx:wyxVQdohSQNjLh4PLZ5l2XdYWAc/ZZk

MITRE ATT&CK Enterprise v15

Tasks