General

  • Target

    JaffaCakes118_128302e20c3798be605d984f3fc3d390

  • Size

    261KB

  • Sample

    250123-bjs97awjgn

  • MD5

    128302e20c3798be605d984f3fc3d390

  • SHA1

    0650a59d25b18b5cea20ff3cb236e89cd32837f8

  • SHA256

    69507514ed3300f2b4e700da8946e2a09d3124662ca1c9daea135b5a3359d03c

  • SHA512

    ef716b9b5d11705da4d60aed0421600658d17773778283217ef0a1b124675efdaea91fd1cd4b03fd2b64a79a95fafb4f5f0fdaed4914ff635425bfdc5b160ea4

  • SSDEEP

    6144:bsMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:bDPSZrEtPU4Nmn08r2QnjR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_128302e20c3798be605d984f3fc3d390

    • Size

      261KB

    • MD5

      128302e20c3798be605d984f3fc3d390

    • SHA1

      0650a59d25b18b5cea20ff3cb236e89cd32837f8

    • SHA256

      69507514ed3300f2b4e700da8946e2a09d3124662ca1c9daea135b5a3359d03c

    • SHA512

      ef716b9b5d11705da4d60aed0421600658d17773778283217ef0a1b124675efdaea91fd1cd4b03fd2b64a79a95fafb4f5f0fdaed4914ff635425bfdc5b160ea4

    • SSDEEP

      6144:bsMdjPSZWpwE1bYvuaBDLUfNuuunrwGo8r2guQnjR:bDPSZrEtPU4Nmn08r2QnjR

MITRE ATT&CK Enterprise v15

Tasks