General

  • Target

    JaffaCakes118_bbf3aa1b145ee62d73ce5812db6ff5ae

  • Size

    257KB

  • Sample

    250119-dwv1natmat

  • MD5

    bbf3aa1b145ee62d73ce5812db6ff5ae

  • SHA1

    043b45d6222a4f4c2350ce44014db0b1122c7451

  • SHA256

    25a2ae8127f9b894614e69a7c6268eca524638647e03ab2b1383f211a3db6710

  • SHA512

    6a5d407c3e6ceff4dea55c135e17c48a05012ec1c3e4f70f723cf41e421c45b3cd7e982e1782255c38fd2cf53dc4d662207949498fb4bae53e2221e5256f2b0d

  • SSDEEP

    6144:+dZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:OkODuHyseYW2IzT4R3ht7Mx

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_bbf3aa1b145ee62d73ce5812db6ff5ae

    • Size

      257KB

    • MD5

      bbf3aa1b145ee62d73ce5812db6ff5ae

    • SHA1

      043b45d6222a4f4c2350ce44014db0b1122c7451

    • SHA256

      25a2ae8127f9b894614e69a7c6268eca524638647e03ab2b1383f211a3db6710

    • SHA512

      6a5d407c3e6ceff4dea55c135e17c48a05012ec1c3e4f70f723cf41e421c45b3cd7e982e1782255c38fd2cf53dc4d662207949498fb4bae53e2221e5256f2b0d

    • SSDEEP

      6144:+dZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:OkODuHyseYW2IzT4R3ht7Mx

MITRE ATT&CK Enterprise v15

Tasks