General

  • Target

    JaffaCakes118_f5f543f09a8796a3095207b7bc236f06

  • Size

    260KB

  • Sample

    250120-xwpnesvjew

  • MD5

    f5f543f09a8796a3095207b7bc236f06

  • SHA1

    3708f45e7104e7ca15f245aa88a2cb5ce4ef3382

  • SHA256

    167eccbd74bfe4e30ae5dafae1a430dbf03e32ea0777a9205f63d752c5ba5711

  • SHA512

    978bd23a7711b860f48c02cb6fa5e8c2579fbd171979b6c6cc6f3f994cb50b8e348f82d51e867dcd6465096f235aef254c94aea4cf8d3227d6f41f1e46edd4c0

  • SSDEEP

    6144:yAPTOCuq51JsmiQFF0kJNOlsh2IiobuUnGsf8AD:yoB7BsHQz8JmG0D

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f5f543f09a8796a3095207b7bc236f06

    • Size

      260KB

    • MD5

      f5f543f09a8796a3095207b7bc236f06

    • SHA1

      3708f45e7104e7ca15f245aa88a2cb5ce4ef3382

    • SHA256

      167eccbd74bfe4e30ae5dafae1a430dbf03e32ea0777a9205f63d752c5ba5711

    • SHA512

      978bd23a7711b860f48c02cb6fa5e8c2579fbd171979b6c6cc6f3f994cb50b8e348f82d51e867dcd6465096f235aef254c94aea4cf8d3227d6f41f1e46edd4c0

    • SSDEEP

      6144:yAPTOCuq51JsmiQFF0kJNOlsh2IiobuUnGsf8AD:yoB7BsHQz8JmG0D

MITRE ATT&CK Enterprise v15

Tasks