General

  • Target

    JaffaCakes118_142656cf8f64267129b06c1c63a9c2a7

  • Size

    270KB

  • Sample

    250123-gbnmmawmer

  • MD5

    142656cf8f64267129b06c1c63a9c2a7

  • SHA1

    0f95ed4bc6130bb504be274b2caa036ed0f43c99

  • SHA256

    2d35f4a41390d7de0908c701ede9c42b29428fb6e6cdfa3105bc6963426c57e7

  • SHA512

    08c6cde56a4a3586abf3466fcea7983e01da17f86abc925e5c212a5ed16e34aeed2cb220a0c01ebf79c1d6739febc32a4e9d2c4d53b652216b5d16e2b2208d66

  • SSDEEP

    6144:zntWcVLDchVx1E+zB0H7bWyUEChglC419BgSOUu1W/:zn3oh71V0b9C8C4/eSOUB/

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_142656cf8f64267129b06c1c63a9c2a7

    • Size

      270KB

    • MD5

      142656cf8f64267129b06c1c63a9c2a7

    • SHA1

      0f95ed4bc6130bb504be274b2caa036ed0f43c99

    • SHA256

      2d35f4a41390d7de0908c701ede9c42b29428fb6e6cdfa3105bc6963426c57e7

    • SHA512

      08c6cde56a4a3586abf3466fcea7983e01da17f86abc925e5c212a5ed16e34aeed2cb220a0c01ebf79c1d6739febc32a4e9d2c4d53b652216b5d16e2b2208d66

    • SSDEEP

      6144:zntWcVLDchVx1E+zB0H7bWyUEChglC419BgSOUu1W/:zn3oh71V0b9C8C4/eSOUB/

MITRE ATT&CK Enterprise v15

Tasks