General

  • Target

    JaffaCakes118_00226fbc4e74031e46d82c64e63da6a7

  • Size

    355KB

  • Sample

    250120-1heg3szrcn

  • MD5

    00226fbc4e74031e46d82c64e63da6a7

  • SHA1

    f45ac11a9aa9261dac3deb9f6a6cd17af54e6bd7

  • SHA256

    47c55e25f6d8c3feedd55823fc778b112e021877281e95f71fdd3d57b8fa6d57

  • SHA512

    fd30930118b0c6e02de986f6c829e7eb479390e3a76ae1ec86a074b5c5dfe9cbd3f7e6422d6c89b5fdc0f115a5d534f11ef78ba50e3e18d3c56bdb507dc1c55d

  • SSDEEP

    6144:lssGHX2btub+F8U2+sklOCz/yq+cqoGU0lzAA7whWtxIT951Pal4ySQw:+s7tY+GU2JCh+4G/lzzM4txkRMw

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_00226fbc4e74031e46d82c64e63da6a7

    • Size

      355KB

    • MD5

      00226fbc4e74031e46d82c64e63da6a7

    • SHA1

      f45ac11a9aa9261dac3deb9f6a6cd17af54e6bd7

    • SHA256

      47c55e25f6d8c3feedd55823fc778b112e021877281e95f71fdd3d57b8fa6d57

    • SHA512

      fd30930118b0c6e02de986f6c829e7eb479390e3a76ae1ec86a074b5c5dfe9cbd3f7e6422d6c89b5fdc0f115a5d534f11ef78ba50e3e18d3c56bdb507dc1c55d

    • SSDEEP

      6144:lssGHX2btub+F8U2+sklOCz/yq+cqoGU0lzAA7whWtxIT951Pal4ySQw:+s7tY+GU2JCh+4G/lzzM4txkRMw

MITRE ATT&CK Enterprise v15

Tasks