General

  • Target

    JaffaCakes118_20ff5576359d23999399699b66c9fb9d

  • Size

    251KB

  • Sample

    250124-nprprsxpgq

  • MD5

    20ff5576359d23999399699b66c9fb9d

  • SHA1

    947e5d5d6a210f0715ea8d5e46e49b3dcf5a796a

  • SHA256

    d4d1c3a73cf8cbe86e6db93c39cf26edc3fbb9547224c54695dfedaa5e8b1b97

  • SHA512

    f1c30c8d22978a32302eeda76018f2f0c5eb5daafc52cc3e1814247293a55837ae8fb645761b131efa35c58d8b776c53451d13776df0ea42f0a3bd3e635d1237

  • SSDEEP

    6144:BY9eF7vHJNXoJk1LGHHdHaNJLBRITgZl5AHWj3BchNERF:y94jHj+k1LWQNOgZ/jGgL

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_20ff5576359d23999399699b66c9fb9d

    • Size

      251KB

    • MD5

      20ff5576359d23999399699b66c9fb9d

    • SHA1

      947e5d5d6a210f0715ea8d5e46e49b3dcf5a796a

    • SHA256

      d4d1c3a73cf8cbe86e6db93c39cf26edc3fbb9547224c54695dfedaa5e8b1b97

    • SHA512

      f1c30c8d22978a32302eeda76018f2f0c5eb5daafc52cc3e1814247293a55837ae8fb645761b131efa35c58d8b776c53451d13776df0ea42f0a3bd3e635d1237

    • SSDEEP

      6144:BY9eF7vHJNXoJk1LGHHdHaNJLBRITgZl5AHWj3BchNERF:y94jHj+k1LWQNOgZ/jGgL

MITRE ATT&CK Enterprise v15

Tasks