General

  • Target

    JaffaCakes118_eb9f9ad91d3ca6699f5fd0570bde159e

  • Size

    264KB

  • Sample

    250120-rw1ssstncv

  • MD5

    eb9f9ad91d3ca6699f5fd0570bde159e

  • SHA1

    c0b2d7e59823708e4e98d429e895f0089c4d6826

  • SHA256

    2665904be0a3e65451ba6d381f5ad2d62a21de169e5dd8ee371a79117be1fbe8

  • SHA512

    5dbb2d80f5543ac58a6dc18a3eaea571a89fea5c4035a527a81140ec10758a99bd3e010badcc2605934ce9bec2abd161cfb4c2060c0dfaeb416e132b16f6b176

  • SSDEEP

    6144:0zpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:Ewc7a4hooxDAkbOaMa/0o/z9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_eb9f9ad91d3ca6699f5fd0570bde159e

    • Size

      264KB

    • MD5

      eb9f9ad91d3ca6699f5fd0570bde159e

    • SHA1

      c0b2d7e59823708e4e98d429e895f0089c4d6826

    • SHA256

      2665904be0a3e65451ba6d381f5ad2d62a21de169e5dd8ee371a79117be1fbe8

    • SHA512

      5dbb2d80f5543ac58a6dc18a3eaea571a89fea5c4035a527a81140ec10758a99bd3e010badcc2605934ce9bec2abd161cfb4c2060c0dfaeb416e132b16f6b176

    • SSDEEP

      6144:0zpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:Ewc7a4hooxDAkbOaMa/0o/z9

MITRE ATT&CK Enterprise v15

Tasks