General

  • Target

    JaffaCakes118_1a9c2bcff5d99647e27b9405e4b3e38f

  • Size

    257KB

  • Sample

    250123-ymt28a1mgv

  • MD5

    1a9c2bcff5d99647e27b9405e4b3e38f

  • SHA1

    7fc7d38af77abfb21649ebfabd8542a00aa6d9e2

  • SHA256

    c2a4adc89c30e4909b91415d503e992c0b6d36dba358dcec06437d16f5d2b85f

  • SHA512

    6024bfd006249c717ff85fd71cb14c486bc62ceef287913cc3927e293d424582e5a029053d0f892171c1ecf8b70101ae1864f1f21bf923bd5a128c3e2eca8828

  • SSDEEP

    6144:FD9sntZ8cWJOcUz6QYO7fvxc0Im3oFmO797QwnE4hMt:VSt+cWJOBOVO7vrIU67dDE4hM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_1a9c2bcff5d99647e27b9405e4b3e38f

    • Size

      257KB

    • MD5

      1a9c2bcff5d99647e27b9405e4b3e38f

    • SHA1

      7fc7d38af77abfb21649ebfabd8542a00aa6d9e2

    • SHA256

      c2a4adc89c30e4909b91415d503e992c0b6d36dba358dcec06437d16f5d2b85f

    • SHA512

      6024bfd006249c717ff85fd71cb14c486bc62ceef287913cc3927e293d424582e5a029053d0f892171c1ecf8b70101ae1864f1f21bf923bd5a128c3e2eca8828

    • SSDEEP

      6144:FD9sntZ8cWJOcUz6QYO7fvxc0Im3oFmO797QwnE4hMt:VSt+cWJOBOVO7vrIU67dDE4hM

MITRE ATT&CK Enterprise v15

Tasks