General

  • Target

    JaffaCakes118_db6a837ab88a256317f89845f44ce966

  • Size

    250KB

  • Sample

    250120-elxxyazpds

  • MD5

    db6a837ab88a256317f89845f44ce966

  • SHA1

    a58d40e37aece4177f1f5ce058be1b6662f28497

  • SHA256

    16d59b1284550a1b97793cead2bc15d826d7e76ec082760f0768f611ec0a8e30

  • SHA512

    d2243c6815754a106d3e3825b344b7a3d168204440a39c5cd9f7f06df3e1977aef1680710ce51ef41bad57cc6512ed186ba69a3f301628ba4dfcd63396ea4823

  • SSDEEP

    6144:0YOw1bf/ug7Vb4ectmgC32x/fkngrEjZCMwbVODwF:Wqbf/T714FjC32x3kcEtkEU

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_db6a837ab88a256317f89845f44ce966

    • Size

      250KB

    • MD5

      db6a837ab88a256317f89845f44ce966

    • SHA1

      a58d40e37aece4177f1f5ce058be1b6662f28497

    • SHA256

      16d59b1284550a1b97793cead2bc15d826d7e76ec082760f0768f611ec0a8e30

    • SHA512

      d2243c6815754a106d3e3825b344b7a3d168204440a39c5cd9f7f06df3e1977aef1680710ce51ef41bad57cc6512ed186ba69a3f301628ba4dfcd63396ea4823

    • SSDEEP

      6144:0YOw1bf/ug7Vb4ectmgC32x/fkngrEjZCMwbVODwF:Wqbf/T714FjC32x3kcEtkEU

MITRE ATT&CK Enterprise v15

Tasks