General

  • Target

    JaffaCakes118_17ae1518ba5f5f91df0f162f7e1f3f00

  • Size

    246KB

  • Sample

    250123-qq2bps1mew

  • MD5

    17ae1518ba5f5f91df0f162f7e1f3f00

  • SHA1

    18035001807c2fc0dc6a8b4dca67c009ba9adb29

  • SHA256

    7e1e574949b300ff6c56df4711e1438fa545c56266509f30f7849c159b935915

  • SHA512

    084ce795de802be88997923f2d87612f51c322c8cf36bb36e8c005fe8a43f7bd73d48a1a56848d9a5c86b7fad258428d474b5c371b673c122522221ad08e2766

  • SSDEEP

    6144:x4dyaDgSqCwOAua7kwrZrSV6OCQB86jEVUKCnY0Iu:x4lMH3uaJ62EEVU6u

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_17ae1518ba5f5f91df0f162f7e1f3f00

    • Size

      246KB

    • MD5

      17ae1518ba5f5f91df0f162f7e1f3f00

    • SHA1

      18035001807c2fc0dc6a8b4dca67c009ba9adb29

    • SHA256

      7e1e574949b300ff6c56df4711e1438fa545c56266509f30f7849c159b935915

    • SHA512

      084ce795de802be88997923f2d87612f51c322c8cf36bb36e8c005fe8a43f7bd73d48a1a56848d9a5c86b7fad258428d474b5c371b673c122522221ad08e2766

    • SSDEEP

      6144:x4dyaDgSqCwOAua7kwrZrSV6OCQB86jEVUKCnY0Iu:x4lMH3uaJ62EEVU6u

MITRE ATT&CK Enterprise v15

Tasks