General

  • Target

    JaffaCakes118_108cebcfefda86f412a037578b9386b9

  • Size

    256KB

  • Sample

    250122-yfsktaskcz

  • MD5

    108cebcfefda86f412a037578b9386b9

  • SHA1

    5f2bdfd8d30706f65fea88a6ec547d3d4cf036a5

  • SHA256

    ec74a9377384784f9cdfb648af37465fcd4ed77dd4e90fa74c81c3c5fe8e25b4

  • SHA512

    62a07f5aea4dd967d5a289a5e3b98022c747a82911db77e14b8914a5cb8f5ef0d64baaa2b5a15a1bb64f0d2185638c9038dfb20f651baae373cbbb3a6b27a2eb

  • SSDEEP

    6144:vw5J8uT7bp56aZVgpomM4sFVilzoUy7Xt+:Ipd5nVEM4sFkF3y7XA

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_108cebcfefda86f412a037578b9386b9

    • Size

      256KB

    • MD5

      108cebcfefda86f412a037578b9386b9

    • SHA1

      5f2bdfd8d30706f65fea88a6ec547d3d4cf036a5

    • SHA256

      ec74a9377384784f9cdfb648af37465fcd4ed77dd4e90fa74c81c3c5fe8e25b4

    • SHA512

      62a07f5aea4dd967d5a289a5e3b98022c747a82911db77e14b8914a5cb8f5ef0d64baaa2b5a15a1bb64f0d2185638c9038dfb20f651baae373cbbb3a6b27a2eb

    • SSDEEP

      6144:vw5J8uT7bp56aZVgpomM4sFVilzoUy7Xt+:Ipd5nVEM4sFkF3y7XA

MITRE ATT&CK Enterprise v15

Tasks