General

  • Target

    JaffaCakes118_d648bf9188fa87edd5e3750b350d9512

  • Size

    266KB

  • Sample

    250120-abp25a1rbs

  • MD5

    d648bf9188fa87edd5e3750b350d9512

  • SHA1

    3a1315cb6faa094e6c1283ca93d98464f69ded58

  • SHA256

    124d2f74816af6d1f5323c71a6f064345427b743fd9980ed9572463aba1e0487

  • SHA512

    76774b365d1376d528a17a63bc33e5adb73cc8464a14ab795e02c41ef5abd3f889afb9ab92f7d21e452293895a7f8fc41c540c07869bf528a6e3a558819733a1

  • SSDEEP

    3072:0W/1lqNqAoPJl+Q7fFOPLfie9rHbK5pWsl8bnDZNnZRfs6pCWtKU7xTVKpfo5Utn:jrDPSgFCqiXIQ28bDr5trKpfo5aoo

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d648bf9188fa87edd5e3750b350d9512

    • Size

      266KB

    • MD5

      d648bf9188fa87edd5e3750b350d9512

    • SHA1

      3a1315cb6faa094e6c1283ca93d98464f69ded58

    • SHA256

      124d2f74816af6d1f5323c71a6f064345427b743fd9980ed9572463aba1e0487

    • SHA512

      76774b365d1376d528a17a63bc33e5adb73cc8464a14ab795e02c41ef5abd3f889afb9ab92f7d21e452293895a7f8fc41c540c07869bf528a6e3a558819733a1

    • SSDEEP

      3072:0W/1lqNqAoPJl+Q7fFOPLfie9rHbK5pWsl8bnDZNnZRfs6pCWtKU7xTVKpfo5Utn:jrDPSgFCqiXIQ28bDr5trKpfo5aoo

MITRE ATT&CK Enterprise v15

Tasks