General

  • Target

    JaffaCakes118_1bc4358bfa0e17afbb40d6e2f1713b42

  • Size

    261KB

  • Sample

    250123-2sz27sxkcx

  • MD5

    1bc4358bfa0e17afbb40d6e2f1713b42

  • SHA1

    d3c7c7b6758d556de433459ab148a12fbb680df2

  • SHA256

    954462e654d141fe60ecd9b83a920ffba2d1b9e1b68726f5a55a6e9be2aedf36

  • SHA512

    5538de6f0ec97743505dfe3624400b8488c1fc8ec1e9ecd6916c8a1a4d912ae3ca30ab5aaf4ea2d0df0ec98b1db8a32291a7d80840954f8056ad54a720ec3f0b

  • SSDEEP

    6144:MsMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:MDPSZrEtPU4Nmn08r2QnjR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_1bc4358bfa0e17afbb40d6e2f1713b42

    • Size

      261KB

    • MD5

      1bc4358bfa0e17afbb40d6e2f1713b42

    • SHA1

      d3c7c7b6758d556de433459ab148a12fbb680df2

    • SHA256

      954462e654d141fe60ecd9b83a920ffba2d1b9e1b68726f5a55a6e9be2aedf36

    • SHA512

      5538de6f0ec97743505dfe3624400b8488c1fc8ec1e9ecd6916c8a1a4d912ae3ca30ab5aaf4ea2d0df0ec98b1db8a32291a7d80840954f8056ad54a720ec3f0b

    • SSDEEP

      6144:MsMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:MDPSZrEtPU4Nmn08r2QnjR

MITRE ATT&CK Enterprise v15

Tasks