General

  • Target

    JaffaCakes118_0278587fb644dfe591a9398aeea8590d

  • Size

    255KB

  • Sample

    250121-gl3jjazjcr

  • MD5

    0278587fb644dfe591a9398aeea8590d

  • SHA1

    54dd08be7f023339f8f73400978177559ca3d8e1

  • SHA256

    94616e19a04a2c0e3d15b975c1c3aa4fcee7c2df16c7f35e8f61cce03fd0cce5

  • SHA512

    81a9902887116e6765d5eaaa0f66c51e8f3e419674b90c93fc22abfe09afef0f6983c8b7e060aa7851d09a144b06b5a15e74b5a5b7183b58fcb6c3e82e22aa74

  • SSDEEP

    6144:ONU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:ONRdpgdRRoTCD4ijpoix

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0278587fb644dfe591a9398aeea8590d

    • Size

      255KB

    • MD5

      0278587fb644dfe591a9398aeea8590d

    • SHA1

      54dd08be7f023339f8f73400978177559ca3d8e1

    • SHA256

      94616e19a04a2c0e3d15b975c1c3aa4fcee7c2df16c7f35e8f61cce03fd0cce5

    • SHA512

      81a9902887116e6765d5eaaa0f66c51e8f3e419674b90c93fc22abfe09afef0f6983c8b7e060aa7851d09a144b06b5a15e74b5a5b7183b58fcb6c3e82e22aa74

    • SSDEEP

      6144:ONU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:ONRdpgdRRoTCD4ijpoix

MITRE ATT&CK Enterprise v15

Tasks