General

  • Target

    JaffaCakes118_0aa93e3949b0497cd584bb30f54ee5b0

  • Size

    287KB

  • Sample

    250122-fxb1aa1jfp

  • MD5

    0aa93e3949b0497cd584bb30f54ee5b0

  • SHA1

    1c55326281e40f4fdb37ba0c439493c1aaeadb1e

  • SHA256

    d271491e2819c0611799baa8af3cb32c11b945fb304ec92f4cca18b7d83e7186

  • SHA512

    85845f33a064722d4aadf094fbb4bf07e073ca16d7d4118e051bcbe0df0315a0cea3d56648c07c843a82c02339bf9969b92ab29124b4cfe62984214e2ee7a975

  • SSDEEP

    6144:E84R+/nBQojUb4LoaXqMKVjNY4GuKcxwMwulQMEAj+:9hBQ6n/SVqxcxwDunE3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0aa93e3949b0497cd584bb30f54ee5b0

    • Size

      287KB

    • MD5

      0aa93e3949b0497cd584bb30f54ee5b0

    • SHA1

      1c55326281e40f4fdb37ba0c439493c1aaeadb1e

    • SHA256

      d271491e2819c0611799baa8af3cb32c11b945fb304ec92f4cca18b7d83e7186

    • SHA512

      85845f33a064722d4aadf094fbb4bf07e073ca16d7d4118e051bcbe0df0315a0cea3d56648c07c843a82c02339bf9969b92ab29124b4cfe62984214e2ee7a975

    • SSDEEP

      6144:E84R+/nBQojUb4LoaXqMKVjNY4GuKcxwMwulQMEAj+:9hBQ6n/SVqxcxwDunE3

MITRE ATT&CK Enterprise v15

Tasks