General

  • Target

    JaffaCakes118_f22c90ec7cac5a9de202f9f5bb6d2eec

  • Size

    210KB

  • Sample

    250120-vre73sznev

  • MD5

    f22c90ec7cac5a9de202f9f5bb6d2eec

  • SHA1

    9319cb2dfa4d92a8370cadb6254abc3fa9f186e5

  • SHA256

    1e7e357e4913f7ba7da8d102b151e9a61abaa95b294fea784d308bc2cfd79d0d

  • SHA512

    bbebcb553b8698cd1f13cbbce70884f9c18643a86457ec848bac6ef1e140485f61fc799e813a4a551fa907b41267aacac6d8a35bff60080649b9abe83b6b017a

  • SSDEEP

    6144:HNS5VmS/+PRHgzKmHMyTTaPrPXa3rkO2E1eJ+p:HIaxgzKmRUs+Oe0

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_f22c90ec7cac5a9de202f9f5bb6d2eec

    • Size

      210KB

    • MD5

      f22c90ec7cac5a9de202f9f5bb6d2eec

    • SHA1

      9319cb2dfa4d92a8370cadb6254abc3fa9f186e5

    • SHA256

      1e7e357e4913f7ba7da8d102b151e9a61abaa95b294fea784d308bc2cfd79d0d

    • SHA512

      bbebcb553b8698cd1f13cbbce70884f9c18643a86457ec848bac6ef1e140485f61fc799e813a4a551fa907b41267aacac6d8a35bff60080649b9abe83b6b017a

    • SSDEEP

      6144:HNS5VmS/+PRHgzKmHMyTTaPrPXa3rkO2E1eJ+p:HIaxgzKmRUs+Oe0

MITRE ATT&CK Enterprise v15

Tasks