General

  • Target

    JaffaCakes118_4f86c0c4605e7f1aef7624f2b5a2f0a0

  • Size

    250KB

  • Sample

    250115-hcf5lstpay

  • MD5

    4f86c0c4605e7f1aef7624f2b5a2f0a0

  • SHA1

    3c3cb37df0754b0794616561d4900a9278181e01

  • SHA256

    20b5edd1d38b120afb2d736e1de5207bcfef2a354915c7f0b40bfb2d8bdedb54

  • SHA512

    918b5f3beca9c0e0ffae8dd24c3a522abb850199a5c57b77a047cc43c1609aef5c6c9d98e2e1a25d6129ad3da6ac8986944da8453c253bb3104ea8057a2e4807

  • SSDEEP

    6144:7q6SQWzKUSaIFqdO9XYqXvnKSFKhoVmTVLf31Sp:VSQs/SjFxNYyVTVm11S

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_4f86c0c4605e7f1aef7624f2b5a2f0a0

    • Size

      250KB

    • MD5

      4f86c0c4605e7f1aef7624f2b5a2f0a0

    • SHA1

      3c3cb37df0754b0794616561d4900a9278181e01

    • SHA256

      20b5edd1d38b120afb2d736e1de5207bcfef2a354915c7f0b40bfb2d8bdedb54

    • SHA512

      918b5f3beca9c0e0ffae8dd24c3a522abb850199a5c57b77a047cc43c1609aef5c6c9d98e2e1a25d6129ad3da6ac8986944da8453c253bb3104ea8057a2e4807

    • SSDEEP

      6144:7q6SQWzKUSaIFqdO9XYqXvnKSFKhoVmTVLf31Sp:VSQs/SjFxNYyVTVm11S

MITRE ATT&CK Enterprise v15

Tasks