General

  • Target

    JaffaCakes118_0b144b6a4cfe792f94781c77efe73d06

  • Size

    262KB

  • Sample

    250122-g19ldssqdp

  • MD5

    0b144b6a4cfe792f94781c77efe73d06

  • SHA1

    b4e74e96b6d49250e661ba0dcb74f35b1b32e141

  • SHA256

    c9a773e539e3147a5926850256c83d373aed7823e955735caf7fae6461a27a61

  • SHA512

    91ca85b68a51cb88031d3c618ea25c5ca3696d4bb0a130b8b13ac2e9cc633efb224d606e42de67a20a234f5228e98a199b237cb2ca0ad44c3922b299f6cdca45

  • SSDEEP

    6144:o+YWuHvzUjwIX4/K9qyngFaslvi2yCNpqFDOtIgb8HnnBykzaU9SKZ+b:hYWuHvQj1X+K9qyngFasl6fJ5NIkzj9K

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0b144b6a4cfe792f94781c77efe73d06

    • Size

      262KB

    • MD5

      0b144b6a4cfe792f94781c77efe73d06

    • SHA1

      b4e74e96b6d49250e661ba0dcb74f35b1b32e141

    • SHA256

      c9a773e539e3147a5926850256c83d373aed7823e955735caf7fae6461a27a61

    • SHA512

      91ca85b68a51cb88031d3c618ea25c5ca3696d4bb0a130b8b13ac2e9cc633efb224d606e42de67a20a234f5228e98a199b237cb2ca0ad44c3922b299f6cdca45

    • SSDEEP

      6144:o+YWuHvzUjwIX4/K9qyngFaslvi2yCNpqFDOtIgb8HnnBykzaU9SKZ+b:hYWuHvQj1X+K9qyngFasl6fJ5NIkzj9K

MITRE ATT&CK Enterprise v15

Tasks