General

  • Target

    JaffaCakes118_00044e8725cfd437d11fed8eabc48966

  • Size

    258KB

  • Sample

    250120-z14z1syrhr

  • MD5

    00044e8725cfd437d11fed8eabc48966

  • SHA1

    7df74bc0e5c35ceae0484af7a8929b836d99c375

  • SHA256

    87ac77faa7de25c45b595c322541551d72f08b3c3615670dba19234f157e14dd

  • SHA512

    1c019ac1104154c1f946a2cbb3e4c3c55aa1f265a3f847bdda4742499f00ece575fda9253a72e511cc7c1dc6fbb4ae5df32dd3fb1d48702a96c3cdf71d7c7533

  • SSDEEP

    3072:XFgNx7UOOrEHuOMwhvLqJhacw8kgrY1ymk2+oRVDqc9ZZIap1ak4yfeVMB0anXBQ:X6TOrEHJNUkgU5m0ZOMcCWw+PGlW

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_00044e8725cfd437d11fed8eabc48966

    • Size

      258KB

    • MD5

      00044e8725cfd437d11fed8eabc48966

    • SHA1

      7df74bc0e5c35ceae0484af7a8929b836d99c375

    • SHA256

      87ac77faa7de25c45b595c322541551d72f08b3c3615670dba19234f157e14dd

    • SHA512

      1c019ac1104154c1f946a2cbb3e4c3c55aa1f265a3f847bdda4742499f00ece575fda9253a72e511cc7c1dc6fbb4ae5df32dd3fb1d48702a96c3cdf71d7c7533

    • SSDEEP

      3072:XFgNx7UOOrEHuOMwhvLqJhacw8kgrY1ymk2+oRVDqc9ZZIap1ak4yfeVMB0anXBQ:X6TOrEHJNUkgU5m0ZOMcCWw+PGlW

MITRE ATT&CK Enterprise v15

Tasks