General

  • Target

    JaffaCakes118_e068305c46702f5a47365fab0481a6f0

  • Size

    246KB

  • Sample

    250120-jdcz1sylav

  • MD5

    e068305c46702f5a47365fab0481a6f0

  • SHA1

    21b1f2468f2607034d561ffc4f680ae23e98fd72

  • SHA256

    1861c49e5ef9021877f4671da7fea8cac4a86e91f7f1252e6e2459ec9fff74dd

  • SHA512

    445a54725a6bcc3eddf46f3fb07b4fa5935adfd9602804c4857a3dadd8fb43770b3d142574cef55993ee83c01de43f99816dd00bd8248e18bec23cd635119b15

  • SSDEEP

    6144:K3lTZFrlz/Yb53QQqPesa+xsHcm1t4EKGgw:KVFJlU3QDPkHcmNT

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_e068305c46702f5a47365fab0481a6f0

    • Size

      246KB

    • MD5

      e068305c46702f5a47365fab0481a6f0

    • SHA1

      21b1f2468f2607034d561ffc4f680ae23e98fd72

    • SHA256

      1861c49e5ef9021877f4671da7fea8cac4a86e91f7f1252e6e2459ec9fff74dd

    • SHA512

      445a54725a6bcc3eddf46f3fb07b4fa5935adfd9602804c4857a3dadd8fb43770b3d142574cef55993ee83c01de43f99816dd00bd8248e18bec23cd635119b15

    • SSDEEP

      6144:K3lTZFrlz/Yb53QQqPesa+xsHcm1t4EKGgw:KVFJlU3QDPkHcmNT

MITRE ATT&CK Enterprise v15

Tasks