General

  • Target

    JaffaCakes118_0badb3be02f5f5a5c8e7fd64e118b618

  • Size

    268KB

  • Sample

    250122-jm1gnswkdt

  • MD5

    0badb3be02f5f5a5c8e7fd64e118b618

  • SHA1

    2b0a64de9002f70feb48fa2a53fbecea278e7074

  • SHA256

    e952c80f208f72542f41469affb7e241d905af5762a525643e2795737e5831b8

  • SHA512

    48b504d4bf9c0cac611fc541ffda079c9641d2737433685604e2f3bed617746f757b52fa078376de48f8a5cf2883b385d3b2b9350bbd5a36d35c68c2e5e3e58d

  • SSDEEP

    6144:o5q4MjTknKcjwzfxOZ9TdIEHFJW4CBEcdCfY1xaiqfIpvN20VEbVDy:IATkKbbxI9CEHFJzCCsCfYWivpvN20T

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0badb3be02f5f5a5c8e7fd64e118b618

    • Size

      268KB

    • MD5

      0badb3be02f5f5a5c8e7fd64e118b618

    • SHA1

      2b0a64de9002f70feb48fa2a53fbecea278e7074

    • SHA256

      e952c80f208f72542f41469affb7e241d905af5762a525643e2795737e5831b8

    • SHA512

      48b504d4bf9c0cac611fc541ffda079c9641d2737433685604e2f3bed617746f757b52fa078376de48f8a5cf2883b385d3b2b9350bbd5a36d35c68c2e5e3e58d

    • SSDEEP

      6144:o5q4MjTknKcjwzfxOZ9TdIEHFJW4CBEcdCfY1xaiqfIpvN20VEbVDy:IATkKbbxI9CEHFJzCCsCfYWivpvN20T

MITRE ATT&CK Enterprise v15

Tasks