General

  • Target

    JaffaCakes118_1cda43309b6e4ddc1ca6752b2031cf37

  • Size

    243KB

  • Sample

    250124-b69wfstlhs

  • MD5

    1cda43309b6e4ddc1ca6752b2031cf37

  • SHA1

    dd265244f935dbb20c89859684f6ebacd307b6d7

  • SHA256

    955672ba34c7aa63735c5d40fe91224d130e2a667f7c0f0e824aa12c9f48f0e4

  • SHA512

    e14e83dc2c3bbbd154e949c97dc1f0ffc8020dde222e9f621be789b3ecdc889ebc81b25cf4a72ec007d2e3ffd1565caeafc16aaccf0c2b97dde0ae8c64f453db

  • SSDEEP

    6144:DnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:lTKCS2sjWC1rfd/Rtqc7HqkYh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_1cda43309b6e4ddc1ca6752b2031cf37

    • Size

      243KB

    • MD5

      1cda43309b6e4ddc1ca6752b2031cf37

    • SHA1

      dd265244f935dbb20c89859684f6ebacd307b6d7

    • SHA256

      955672ba34c7aa63735c5d40fe91224d130e2a667f7c0f0e824aa12c9f48f0e4

    • SHA512

      e14e83dc2c3bbbd154e949c97dc1f0ffc8020dde222e9f621be789b3ecdc889ebc81b25cf4a72ec007d2e3ffd1565caeafc16aaccf0c2b97dde0ae8c64f453db

    • SSDEEP

      6144:DnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:lTKCS2sjWC1rfd/Rtqc7HqkYh

MITRE ATT&CK Enterprise v15

Tasks