General

  • Target

    JaffaCakes118_242d344c07830583617c30ea9eed27cd

  • Size

    255KB

  • Sample

    250124-wxnxva1mbs

  • MD5

    242d344c07830583617c30ea9eed27cd

  • SHA1

    4ddba8e0ff43a1ef549711ec24c0d1827867ce24

  • SHA256

    b47040c11bc562a2ca69717699838978a88f5a82c4c3d0554d8ec08f4f061682

  • SHA512

    bad1810a56be24f02f0f09fa86de2b77e8012e6614bce0c53a07d7cd5db582f02083db14a76bae0b4eb7dbf08eb25a97ddc31d2e4022361922b005ac4c7de63b

  • SSDEEP

    6144:vNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:vNRdpgdRRoTCD4ijpoix

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_242d344c07830583617c30ea9eed27cd

    • Size

      255KB

    • MD5

      242d344c07830583617c30ea9eed27cd

    • SHA1

      4ddba8e0ff43a1ef549711ec24c0d1827867ce24

    • SHA256

      b47040c11bc562a2ca69717699838978a88f5a82c4c3d0554d8ec08f4f061682

    • SHA512

      bad1810a56be24f02f0f09fa86de2b77e8012e6614bce0c53a07d7cd5db582f02083db14a76bae0b4eb7dbf08eb25a97ddc31d2e4022361922b005ac4c7de63b

    • SSDEEP

      6144:vNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:vNRdpgdRRoTCD4ijpoix

MITRE ATT&CK Enterprise v15

Tasks