General

  • Target

    JaffaCakes118_d36b93aa001729c94fefcc7aae2bd041

  • Size

    250KB

  • Sample

    250119-z42n3awnct

  • MD5

    d36b93aa001729c94fefcc7aae2bd041

  • SHA1

    7b0e58dbe1641969d75fc6437a5caf6c8d591250

  • SHA256

    1e2610d94fc1732104cd69458efae1ef0fcde1eb976bb209709e0f0f7aeb598e

  • SHA512

    87e7872bf339bd96b14876c0485bbbdde354dc256813d32a1dadc251710dcbd698be352f12aa9ba6069ef9ca3b4c9616f5240da9ea57d0b1ae6db892bd515b0b

  • SSDEEP

    3072:WGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:cXxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d36b93aa001729c94fefcc7aae2bd041

    • Size

      250KB

    • MD5

      d36b93aa001729c94fefcc7aae2bd041

    • SHA1

      7b0e58dbe1641969d75fc6437a5caf6c8d591250

    • SHA256

      1e2610d94fc1732104cd69458efae1ef0fcde1eb976bb209709e0f0f7aeb598e

    • SHA512

      87e7872bf339bd96b14876c0485bbbdde354dc256813d32a1dadc251710dcbd698be352f12aa9ba6069ef9ca3b4c9616f5240da9ea57d0b1ae6db892bd515b0b

    • SSDEEP

      3072:WGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:cXxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

MITRE ATT&CK Enterprise v15

Tasks