General

  • Target

    JaffaCakes118_f48510565f431fb8e63950965f95c3a4

  • Size

    256KB

  • Sample

    250120-w32e5asmhp

  • MD5

    f48510565f431fb8e63950965f95c3a4

  • SHA1

    18b21fbdbd33f86cc23d34291f46e7d0304fb7e5

  • SHA256

    1455b5af936807acc00e9ea7b7e0a5b51a58c5bddad39f6e43b1bd2396108300

  • SHA512

    17dd1f8b309f84320c3b7a95806f4953bae876fd57258058347e61b247c821e43d7df2fd4f142fd2546a17f513118c1c1c4b9ea5df236fd340b6ce0fb75e5a92

  • SSDEEP

    6144:UV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:2UwRd0z/Op1T+xk4hut95fM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f48510565f431fb8e63950965f95c3a4

    • Size

      256KB

    • MD5

      f48510565f431fb8e63950965f95c3a4

    • SHA1

      18b21fbdbd33f86cc23d34291f46e7d0304fb7e5

    • SHA256

      1455b5af936807acc00e9ea7b7e0a5b51a58c5bddad39f6e43b1bd2396108300

    • SHA512

      17dd1f8b309f84320c3b7a95806f4953bae876fd57258058347e61b247c821e43d7df2fd4f142fd2546a17f513118c1c1c4b9ea5df236fd340b6ce0fb75e5a92

    • SSDEEP

      6144:UV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:2UwRd0z/Op1T+xk4hut95fM

MITRE ATT&CK Enterprise v15

Tasks