General

  • Target

    JaffaCakes118_2cd542bd87dea0c6b34c71881a12bdd3

  • Size

    259KB

  • Sample

    250113-w5bx9avlhp

  • MD5

    2cd542bd87dea0c6b34c71881a12bdd3

  • SHA1

    75d0669ed76677090dc2ec2b6f2eb00c1972cc98

  • SHA256

    1d99af0da697aff94d24db8a30ae5e5fb00e6d577fa6e69d23f9fbd030b0ff1f

  • SHA512

    a3de1d9ef90f26dbc85161480aa46cafe27a090cfffe6fc970fedc944c42a4a7453de02de23d28c014dfc2c55adb7148729912ce3c7eb0198eba9b27778c0cff

  • SSDEEP

    6144:0SAqWATnZSdjM6SoqizS0vzyCpMJE1d5L+H328r5h:0hUMdjRLLztpMJAz+X225h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_2cd542bd87dea0c6b34c71881a12bdd3

    • Size

      259KB

    • MD5

      2cd542bd87dea0c6b34c71881a12bdd3

    • SHA1

      75d0669ed76677090dc2ec2b6f2eb00c1972cc98

    • SHA256

      1d99af0da697aff94d24db8a30ae5e5fb00e6d577fa6e69d23f9fbd030b0ff1f

    • SHA512

      a3de1d9ef90f26dbc85161480aa46cafe27a090cfffe6fc970fedc944c42a4a7453de02de23d28c014dfc2c55adb7148729912ce3c7eb0198eba9b27778c0cff

    • SSDEEP

      6144:0SAqWATnZSdjM6SoqizS0vzyCpMJE1d5L+H328r5h:0hUMdjRLLztpMJAz+X225h

MITRE ATT&CK Enterprise v15

Tasks