General

  • Target

    JaffaCakes118_308dfaf6684c8456fd480f77061db281

  • Size

    257KB

  • Sample

    250125-3dmc8stnds

  • MD5

    308dfaf6684c8456fd480f77061db281

  • SHA1

    2797be48b77693aaa99e55a545176489afd1ea0b

  • SHA256

    01693f0718ff3e6de2ea9501f3ea79f8fc6a21a86fbbe54bb42f4282fdb006e7

  • SHA512

    c0ef7119e2ffb69736d72a7a2c2e7cc1cff5ff6c3e49a4a8edbe91828ba3431fc728a2486a38514b7c334879116405737713b3da62b385598c7f9b1af0c1d2fb

  • SSDEEP

    3072:GicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:DXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_308dfaf6684c8456fd480f77061db281

    • Size

      257KB

    • MD5

      308dfaf6684c8456fd480f77061db281

    • SHA1

      2797be48b77693aaa99e55a545176489afd1ea0b

    • SHA256

      01693f0718ff3e6de2ea9501f3ea79f8fc6a21a86fbbe54bb42f4282fdb006e7

    • SHA512

      c0ef7119e2ffb69736d72a7a2c2e7cc1cff5ff6c3e49a4a8edbe91828ba3431fc728a2486a38514b7c334879116405737713b3da62b385598c7f9b1af0c1d2fb

    • SSDEEP

      3072:GicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:DXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks