General

  • Target

    JaffaCakes118_1b7ba7388237f0cc549c5e15f0e2e9e6

  • Size

    250KB

  • Sample

    250123-11rv5axlhm

  • MD5

    1b7ba7388237f0cc549c5e15f0e2e9e6

  • SHA1

    80676847bc5820a5b2c1124b8203b8acdc190dc5

  • SHA256

    47b04d2f0b34a07b07464b257e4f40bcf250a1eeb253f488ef07339f17a108b5

  • SHA512

    6b80048191902060ab6cae56f0cd00d9c1db60e6f48e06127fb1227894b443ac1800ac003288cf45a56796bc525b5029483613bb01cf1007e2f352ede2cf28b6

  • SSDEEP

    6144:8z5PmA1SjbjS17e2ZYHLM3aXFUX9NzasPkT5tCautg7lQPfOCJll7CAvUThwbP:8zZmA1Sj3S17lYHgWw9Zahp7lQHOwll7

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_1b7ba7388237f0cc549c5e15f0e2e9e6

    • Size

      250KB

    • MD5

      1b7ba7388237f0cc549c5e15f0e2e9e6

    • SHA1

      80676847bc5820a5b2c1124b8203b8acdc190dc5

    • SHA256

      47b04d2f0b34a07b07464b257e4f40bcf250a1eeb253f488ef07339f17a108b5

    • SHA512

      6b80048191902060ab6cae56f0cd00d9c1db60e6f48e06127fb1227894b443ac1800ac003288cf45a56796bc525b5029483613bb01cf1007e2f352ede2cf28b6

    • SSDEEP

      6144:8z5PmA1SjbjS17e2ZYHLM3aXFUX9NzasPkT5tCautg7lQPfOCJll7CAvUThwbP:8zZmA1Sj3S17lYHgWw9Zahp7lQHOwll7

MITRE ATT&CK Enterprise v15

Tasks