General

  • Target

    JaffaCakes118_1aa395f2e443ade80a81b16866c63c93

  • Size

    265KB

  • Sample

    250123-yp7q4a1nez

  • MD5

    1aa395f2e443ade80a81b16866c63c93

  • SHA1

    724016e0d8e54e2a7d1606188b5ec624119d925a

  • SHA256

    3e3ef9641e4210631af6e3e59efce2d4c6a622e021ce40d7da0e7d99938b1972

  • SHA512

    99ba5cd4915c40b4817e7e2b63b73426cc7ada3960720d2bfb0be5fe829b80cbc5d79037d8e78dd9917439b0d06e3e092937a4e1361557d52a4e771e5027f55c

  • SSDEEP

    6144:MWywgKQ/dnbdxoXUFuS5fvvUaOWpVshQchEnnbUaDk/ii:MSgLFHvOWpVEhEbU9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_1aa395f2e443ade80a81b16866c63c93

    • Size

      265KB

    • MD5

      1aa395f2e443ade80a81b16866c63c93

    • SHA1

      724016e0d8e54e2a7d1606188b5ec624119d925a

    • SHA256

      3e3ef9641e4210631af6e3e59efce2d4c6a622e021ce40d7da0e7d99938b1972

    • SHA512

      99ba5cd4915c40b4817e7e2b63b73426cc7ada3960720d2bfb0be5fe829b80cbc5d79037d8e78dd9917439b0d06e3e092937a4e1361557d52a4e771e5027f55c

    • SSDEEP

      6144:MWywgKQ/dnbdxoXUFuS5fvvUaOWpVshQchEnnbUaDk/ii:MSgLFHvOWpVEhEbU9

MITRE ATT&CK Enterprise v15

Tasks