General

  • Target

    JaffaCakes118_07a11ea29e49a319a5b9f0867bb48ee2

  • Size

    255KB

  • Sample

    250121-1bj4zsskgp

  • MD5

    07a11ea29e49a319a5b9f0867bb48ee2

  • SHA1

    2d3e765d312b32a3f572a516052c7565d6f62cc3

  • SHA256

    e46b885a26059b7e07b20f2153acef07b10dd2687871b7ea7450b23160c3f4d2

  • SHA512

    729c3a45e7497e927392b4ea6466ca14e34a64ed79ca86698770d0ef53d8508bd1de52f99850901fad73805ccbb6f78b2f1e4dc7689f418a7cd69555b7fb6381

  • SSDEEP

    6144:VNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:VNRdpgdRRoTCD4ijpoix

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_07a11ea29e49a319a5b9f0867bb48ee2

    • Size

      255KB

    • MD5

      07a11ea29e49a319a5b9f0867bb48ee2

    • SHA1

      2d3e765d312b32a3f572a516052c7565d6f62cc3

    • SHA256

      e46b885a26059b7e07b20f2153acef07b10dd2687871b7ea7450b23160c3f4d2

    • SHA512

      729c3a45e7497e927392b4ea6466ca14e34a64ed79ca86698770d0ef53d8508bd1de52f99850901fad73805ccbb6f78b2f1e4dc7689f418a7cd69555b7fb6381

    • SSDEEP

      6144:VNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:VNRdpgdRRoTCD4ijpoix

MITRE ATT&CK Enterprise v15

Tasks