General

  • Target

    JaffaCakes118_627ad629e3c59974b9fcbd3aeb5c6421

  • Size

    252KB

  • Sample

    250115-1enataxjfm

  • MD5

    627ad629e3c59974b9fcbd3aeb5c6421

  • SHA1

    c296cfaf02fb66a55ebaaf6052727c44d44ffe1b

  • SHA256

    1212d393637c210f131ccb4d645e2ba328f2fdd7bdefef2152e92448724def4d

  • SHA512

    6e9c1d981a3a167ec879f114b42c9ac36d000e4433decf4bc00982583d694d39d925777703796dc131f0d7777ad7d7be09c04a341ef5994638ece7b4b5e8c6a3

  • SSDEEP

    6144:Wg9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:zSJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_627ad629e3c59974b9fcbd3aeb5c6421

    • Size

      252KB

    • MD5

      627ad629e3c59974b9fcbd3aeb5c6421

    • SHA1

      c296cfaf02fb66a55ebaaf6052727c44d44ffe1b

    • SHA256

      1212d393637c210f131ccb4d645e2ba328f2fdd7bdefef2152e92448724def4d

    • SHA512

      6e9c1d981a3a167ec879f114b42c9ac36d000e4433decf4bc00982583d694d39d925777703796dc131f0d7777ad7d7be09c04a341ef5994638ece7b4b5e8c6a3

    • SSDEEP

      6144:Wg9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:zSJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

MITRE ATT&CK Enterprise v15

Tasks