General

  • Target

    JaffaCakes118_0b1eb63e8124233decb73f63a2998c28

  • Size

    250KB

  • Sample

    250122-g6basasrhn

  • MD5

    0b1eb63e8124233decb73f63a2998c28

  • SHA1

    27c0bb517672af6b24814eda8ad84768e03c5b07

  • SHA256

    012f2f27600788068b57762d5b6af34af908d262ceabc309a03af99634424adf

  • SHA512

    c2f1e81093b3a5a1a6473e7bc8be67f0fef653bf11af1e0c2e4b9f0e4c28a8b3e3e55332d0e9ceb39fd68160c019d5588251f617353697b15cbc99b4413d92fc

  • SSDEEP

    6144:AX6R9B4TOmFil7uxDGt7rE/kvl5UOQliAzLSMIZGyk3R:/X4T4t7SG5UOKkMINc

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0b1eb63e8124233decb73f63a2998c28

    • Size

      250KB

    • MD5

      0b1eb63e8124233decb73f63a2998c28

    • SHA1

      27c0bb517672af6b24814eda8ad84768e03c5b07

    • SHA256

      012f2f27600788068b57762d5b6af34af908d262ceabc309a03af99634424adf

    • SHA512

      c2f1e81093b3a5a1a6473e7bc8be67f0fef653bf11af1e0c2e4b9f0e4c28a8b3e3e55332d0e9ceb39fd68160c019d5588251f617353697b15cbc99b4413d92fc

    • SSDEEP

      6144:AX6R9B4TOmFil7uxDGt7rE/kvl5UOQliAzLSMIZGyk3R:/X4T4t7SG5UOKkMINc

MITRE ATT&CK Enterprise v15

Tasks