General

  • Target

    JaffaCakes118_f8552723ba2437a8f5cf83397a232d7e

  • Size

    256KB

  • Sample

    250120-zcr1jsxpfl

  • MD5

    f8552723ba2437a8f5cf83397a232d7e

  • SHA1

    cdc7943bafd8f6f635894e850b929d7510bb1d72

  • SHA256

    2f0c0fab8c007f501e4c6ebde280099e8c85d80f7d4cd5f65d5bb742144ea4e2

  • SHA512

    5d824a043e01b1a5f1cd220b08fa9aa36963a4a707012331e05baf76f501e80f3ddd3f06e6794a000df11054eb813b5af007fe1c2bfee398d260529bb41ccec1

  • SSDEEP

    6144:GV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:YUwRd0z/Op1T+xk4hut95fM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f8552723ba2437a8f5cf83397a232d7e

    • Size

      256KB

    • MD5

      f8552723ba2437a8f5cf83397a232d7e

    • SHA1

      cdc7943bafd8f6f635894e850b929d7510bb1d72

    • SHA256

      2f0c0fab8c007f501e4c6ebde280099e8c85d80f7d4cd5f65d5bb742144ea4e2

    • SHA512

      5d824a043e01b1a5f1cd220b08fa9aa36963a4a707012331e05baf76f501e80f3ddd3f06e6794a000df11054eb813b5af007fe1c2bfee398d260529bb41ccec1

    • SSDEEP

      6144:GV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:YUwRd0z/Op1T+xk4hut95fM

MITRE ATT&CK Enterprise v15

Tasks