General

  • Target

    JaffaCakes118_0f4a9e2bb9bf5eb30a26b451b9024483

  • Size

    264KB

  • Sample

    250122-tm1gsavqfl

  • MD5

    0f4a9e2bb9bf5eb30a26b451b9024483

  • SHA1

    0eedaea38f37708244076d9a71a2efc4bf298156

  • SHA256

    1142ecbaeeaa0b529f7873065a2fd8e171e7ca21af4f0fb5812a9c86660e1b97

  • SHA512

    4429e1f8893d9335572c40ec79d6ad674903c40bac5ff3e655d7db0b44585819859bdd3361e7bbf6dd929d32d18a01bcdcbbc3d5e925418279c7b11a00114bf1

  • SSDEEP

    6144:1zpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:Bwc7a4hooxDAkbOaMa/0o/z9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0f4a9e2bb9bf5eb30a26b451b9024483

    • Size

      264KB

    • MD5

      0f4a9e2bb9bf5eb30a26b451b9024483

    • SHA1

      0eedaea38f37708244076d9a71a2efc4bf298156

    • SHA256

      1142ecbaeeaa0b529f7873065a2fd8e171e7ca21af4f0fb5812a9c86660e1b97

    • SHA512

      4429e1f8893d9335572c40ec79d6ad674903c40bac5ff3e655d7db0b44585819859bdd3361e7bbf6dd929d32d18a01bcdcbbc3d5e925418279c7b11a00114bf1

    • SSDEEP

      6144:1zpIT9mZ7acEGhFpwTMhxYlNqqogDkbO/SkF/a/0uFR/6q79:Bwc7a4hooxDAkbOaMa/0o/z9

MITRE ATT&CK Enterprise v15

Tasks