General

  • Target

    JaffaCakes118_26bc26cc199453b5672d891e3157feef

  • Size

    258KB

  • Sample

    250125-ayrt8sxrdr

  • MD5

    26bc26cc199453b5672d891e3157feef

  • SHA1

    71616917ebddf87379e5471b009c7578d0f65e1d

  • SHA256

    a6067b08fb4d16abd24587f775be2434836fbf88c25d5444b2c85de7b3b638e4

  • SHA512

    d9ccf447923ab6b909628d2a324fa7815ba0e29c82f819e070ec5c6b6dbc4c91c1542a2fb79b622e014d0b0c9d7ad8f68d595fd52aa75ddf7a47777c07f8dd6e

  • SSDEEP

    3072:AFgNx7UOOrEHuOMwhvLqJhacw8kgrY1ymk2+oRVDqc9ZZIap1ak4yfeVMB0anXBQ:A6TOrEHJNUkgU5m0ZOMcCWw+PGlW

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_26bc26cc199453b5672d891e3157feef

    • Size

      258KB

    • MD5

      26bc26cc199453b5672d891e3157feef

    • SHA1

      71616917ebddf87379e5471b009c7578d0f65e1d

    • SHA256

      a6067b08fb4d16abd24587f775be2434836fbf88c25d5444b2c85de7b3b638e4

    • SHA512

      d9ccf447923ab6b909628d2a324fa7815ba0e29c82f819e070ec5c6b6dbc4c91c1542a2fb79b622e014d0b0c9d7ad8f68d595fd52aa75ddf7a47777c07f8dd6e

    • SSDEEP

      3072:AFgNx7UOOrEHuOMwhvLqJhacw8kgrY1ymk2+oRVDqc9ZZIap1ak4yfeVMB0anXBQ:A6TOrEHJNUkgU5m0ZOMcCWw+PGlW

MITRE ATT&CK Enterprise v15

Tasks