General

  • Target

    JaffaCakes118_0c36ffe7d818950d8255075a1e45e32d

  • Size

    330KB

  • Sample

    250122-k2y3tsymex

  • MD5

    0c36ffe7d818950d8255075a1e45e32d

  • SHA1

    39a4434c0a4ffb42f90503fa7a06b1eab017ec79

  • SHA256

    52fe4124f4f223a9a17f0551150bc917eb1728130eeec0474c593b4d20636ade

  • SHA512

    cd4a1aec55f13b3407b470e769a8af6b2e707b0c07c64e339122a68cb2f269c14107cd0207dccb92aaa1478663eaf5cc3578573d6344c2062bd720cfcd34f9c6

  • SSDEEP

    6144:haCLEhxwqz/Q5lEq20w7bJ8t9Kf+9k3deUuJ/MFW8zJJho:ehyqz0QH7bJ8tw8UU/MpPo

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0c36ffe7d818950d8255075a1e45e32d

    • Size

      330KB

    • MD5

      0c36ffe7d818950d8255075a1e45e32d

    • SHA1

      39a4434c0a4ffb42f90503fa7a06b1eab017ec79

    • SHA256

      52fe4124f4f223a9a17f0551150bc917eb1728130eeec0474c593b4d20636ade

    • SHA512

      cd4a1aec55f13b3407b470e769a8af6b2e707b0c07c64e339122a68cb2f269c14107cd0207dccb92aaa1478663eaf5cc3578573d6344c2062bd720cfcd34f9c6

    • SSDEEP

      6144:haCLEhxwqz/Q5lEq20w7bJ8t9Kf+9k3deUuJ/MFW8zJJho:ehyqz0QH7bJ8tw8UU/MpPo

MITRE ATT&CK Enterprise v15

Tasks