General

  • Target

    JaffaCakes118_e5b3c6349ed462962970d2c1fdc4a9c7

  • Size

    283KB

  • Sample

    250120-nkcp2swqhz

  • MD5

    e5b3c6349ed462962970d2c1fdc4a9c7

  • SHA1

    e857ac5d740d9779ba65340acf939f754b4b2255

  • SHA256

    2bd052df2a6d2d99c7e4e2bcdc152ee11fe389478178d0b787d1aae715abeab1

  • SHA512

    707c4b1e0075504da701888c65584ed6c71a43cbfa71cf666f96895218071012fc3ced89d5989f236b62e80088833c3cd6a37f416518c2d89cd79c19ed42d83c

  • SSDEEP

    6144:qAR2yMc7Aogde44yCfoEyah2u1ZarBqBtgcmnhHQ48nAUNDt:rL+3XFCfn18BytgcWhHyrR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e5b3c6349ed462962970d2c1fdc4a9c7

    • Size

      283KB

    • MD5

      e5b3c6349ed462962970d2c1fdc4a9c7

    • SHA1

      e857ac5d740d9779ba65340acf939f754b4b2255

    • SHA256

      2bd052df2a6d2d99c7e4e2bcdc152ee11fe389478178d0b787d1aae715abeab1

    • SHA512

      707c4b1e0075504da701888c65584ed6c71a43cbfa71cf666f96895218071012fc3ced89d5989f236b62e80088833c3cd6a37f416518c2d89cd79c19ed42d83c

    • SSDEEP

      6144:qAR2yMc7Aogde44yCfoEyah2u1ZarBqBtgcmnhHQ48nAUNDt:rL+3XFCfn18BytgcWhHyrR

MITRE ATT&CK Enterprise v15

Tasks