General

  • Target

    JaffaCakes118_718fa87b610b8c25c6ec02d8ae5493ea

  • Size

    250KB

  • Sample

    250116-k16fhssqbt

  • MD5

    718fa87b610b8c25c6ec02d8ae5493ea

  • SHA1

    3ea1ba00cdf468852063add8901dc5f80c0bf1b0

  • SHA256

    2860a8944c60f1abbc11b92c5fe212b1d84f1e5084bf5d9106cc7a5fa3d1b515

  • SHA512

    8c7b38c0b00e8b1ddc074f70e303fd3e3c1e2800295208ef9171bb2d846c99dc9f32a1f3c2b04a8ccf05c5075535133f3bcc9f7ea81b65ca1147b818bf1fc264

  • SSDEEP

    3072:DGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:5XxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_718fa87b610b8c25c6ec02d8ae5493ea

    • Size

      250KB

    • MD5

      718fa87b610b8c25c6ec02d8ae5493ea

    • SHA1

      3ea1ba00cdf468852063add8901dc5f80c0bf1b0

    • SHA256

      2860a8944c60f1abbc11b92c5fe212b1d84f1e5084bf5d9106cc7a5fa3d1b515

    • SHA512

      8c7b38c0b00e8b1ddc074f70e303fd3e3c1e2800295208ef9171bb2d846c99dc9f32a1f3c2b04a8ccf05c5075535133f3bcc9f7ea81b65ca1147b818bf1fc264

    • SSDEEP

      3072:DGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:5XxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

MITRE ATT&CK Enterprise v15

Tasks