General

  • Target

    JaffaCakes118_f1456ee64d47489e5b09124f8a9ea90e

  • Size

    256KB

  • Sample

    250120-vc4xwsyrdq

  • MD5

    f1456ee64d47489e5b09124f8a9ea90e

  • SHA1

    d7cc024f38d604be07d4dd93e39b14bff57565ad

  • SHA256

    1882c72ae2cb8e2c31b0fdddeae0fdb3d40a338ce008f4a78938f6559b7d9152

  • SHA512

    85ddf35ac78d9563e2d0b566987a020f74171b3df99fe2a92def412971428bed8bbdf57bf5dc25fef6061bd1dbb69abf0f7a3201d5dce92920e873b11860b43c

  • SSDEEP

    6144:eV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:AUwRd0z/Op1T+xk4hut95fM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f1456ee64d47489e5b09124f8a9ea90e

    • Size

      256KB

    • MD5

      f1456ee64d47489e5b09124f8a9ea90e

    • SHA1

      d7cc024f38d604be07d4dd93e39b14bff57565ad

    • SHA256

      1882c72ae2cb8e2c31b0fdddeae0fdb3d40a338ce008f4a78938f6559b7d9152

    • SHA512

      85ddf35ac78d9563e2d0b566987a020f74171b3df99fe2a92def412971428bed8bbdf57bf5dc25fef6061bd1dbb69abf0f7a3201d5dce92920e873b11860b43c

    • SSDEEP

      6144:eV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:AUwRd0z/Op1T+xk4hut95fM

MITRE ATT&CK Enterprise v15

Tasks