General

  • Target

    JaffaCakes118_19079ac12cbea5b862aae66ea0e42e7c

  • Size

    252KB

  • Sample

    250123-txyqyaxjck

  • MD5

    19079ac12cbea5b862aae66ea0e42e7c

  • SHA1

    d5b644b238b45e0f7f8eb2032f50596690e1c877

  • SHA256

    c307e7ae59127713ef26434e754a309e3a093de61ef75fe11e0efa6fde38f812

  • SHA512

    c9f8ded8a6f664ab51155cf4847f75f0e6560cc37fa280d99b9f0770d805822431e1eae4057d504ca4c04063cce59c2be058ab6b05d9a02ea79545c0e6242506

  • SSDEEP

    6144:u1rwii7st1Y+S6pYQCR+gs74dVGwG+oISthMZzLkV:uT+sH4wgsLMFkV

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_19079ac12cbea5b862aae66ea0e42e7c

    • Size

      252KB

    • MD5

      19079ac12cbea5b862aae66ea0e42e7c

    • SHA1

      d5b644b238b45e0f7f8eb2032f50596690e1c877

    • SHA256

      c307e7ae59127713ef26434e754a309e3a093de61ef75fe11e0efa6fde38f812

    • SHA512

      c9f8ded8a6f664ab51155cf4847f75f0e6560cc37fa280d99b9f0770d805822431e1eae4057d504ca4c04063cce59c2be058ab6b05d9a02ea79545c0e6242506

    • SSDEEP

      6144:u1rwii7st1Y+S6pYQCR+gs74dVGwG+oISthMZzLkV:uT+sH4wgsLMFkV

MITRE ATT&CK Enterprise v15

Tasks