General

  • Target

    JaffaCakes118_1993ae5edf4a503d333edd37fa2984cb

  • Size

    266KB

  • Sample

    250123-v529rsxkhw

  • MD5

    1993ae5edf4a503d333edd37fa2984cb

  • SHA1

    3b001076ab748ebc427cb64eb1abc22e5d4c3e53

  • SHA256

    70d4b440fd36fa1c089338300e88548a030829c821ef3346f1e5ef2aa9c9f0a1

  • SHA512

    0b32314d3c32c3028be6f1fd5fe0c060ebbad8118900ac70fa6df260a4e3e9e2761903c181428f925e5b36b1752d45c3ecf56a9ff02f2ca31bceac99864ef468

  • SSDEEP

    3072:nW/1lqNqAoPJl+Q7fFOPLfie9rHbK5pWsl8bnDZNnZRfs6pCWtKU7xTVKpfo5Utn:6rDPSgFCqiXIQ28bDr5trKpfo5aoo

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_1993ae5edf4a503d333edd37fa2984cb

    • Size

      266KB

    • MD5

      1993ae5edf4a503d333edd37fa2984cb

    • SHA1

      3b001076ab748ebc427cb64eb1abc22e5d4c3e53

    • SHA256

      70d4b440fd36fa1c089338300e88548a030829c821ef3346f1e5ef2aa9c9f0a1

    • SHA512

      0b32314d3c32c3028be6f1fd5fe0c060ebbad8118900ac70fa6df260a4e3e9e2761903c181428f925e5b36b1752d45c3ecf56a9ff02f2ca31bceac99864ef468

    • SSDEEP

      3072:nW/1lqNqAoPJl+Q7fFOPLfie9rHbK5pWsl8bnDZNnZRfs6pCWtKU7xTVKpfo5Utn:6rDPSgFCqiXIQ28bDr5trKpfo5aoo

MITRE ATT&CK Enterprise v15

Tasks