General

  • Target

    JaffaCakes118_017615edc243960ef0f824e8b0c2f03e

  • Size

    262KB

  • Sample

    250121-c4dwnsskgt

  • MD5

    017615edc243960ef0f824e8b0c2f03e

  • SHA1

    d8a1b4df12ffc863bbda788c0fa68e19f37ec3fc

  • SHA256

    b4196b649e347107764b99decc76923c507383d0f347e23627c59263e379b673

  • SHA512

    b32c6813a2faeeb5f1175377d6285547efe7d87a3f7f2310125bdd794f7daa7baeb135e74c4ab972c3a180f12b5f771270cbe95232dcc2c21a5816f3769ea4dc

  • SSDEEP

    3072:/8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:YWQ6HWLs+Eum1RNrkCqddcGRW4P

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_017615edc243960ef0f824e8b0c2f03e

    • Size

      262KB

    • MD5

      017615edc243960ef0f824e8b0c2f03e

    • SHA1

      d8a1b4df12ffc863bbda788c0fa68e19f37ec3fc

    • SHA256

      b4196b649e347107764b99decc76923c507383d0f347e23627c59263e379b673

    • SHA512

      b32c6813a2faeeb5f1175377d6285547efe7d87a3f7f2310125bdd794f7daa7baeb135e74c4ab972c3a180f12b5f771270cbe95232dcc2c21a5816f3769ea4dc

    • SSDEEP

      3072:/8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:YWQ6HWLs+Eum1RNrkCqddcGRW4P

MITRE ATT&CK Enterprise v15

Tasks