General

  • Target

    JaffaCakes118_27b4a02d5be1ecc87aca6f9cc93a0b54

  • Size

    263KB

  • Sample

    250125-dqvgyatrhr

  • MD5

    27b4a02d5be1ecc87aca6f9cc93a0b54

  • SHA1

    3aa33fdc412e9c4472ad9b3d43738a76124f7e68

  • SHA256

    60e26a41a5daf3222f63df5cdd7c15b3b9703a391c50cda824ab458157fe9c40

  • SHA512

    ff08b437ee58ab4ec6e1466ec650d2cf56a482ee718231620b85509e0c3d5af7bb390e8a34d5ebc0c0aec6718953cff64933981526b968694c80c33110f35012

  • SSDEEP

    6144:YhPZy+chYf9vFAQewiHStKoOZ3j7BAkQd/b+TGCokrArDP6c:gBf9FLlpOJxQdjlD7

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_27b4a02d5be1ecc87aca6f9cc93a0b54

    • Size

      263KB

    • MD5

      27b4a02d5be1ecc87aca6f9cc93a0b54

    • SHA1

      3aa33fdc412e9c4472ad9b3d43738a76124f7e68

    • SHA256

      60e26a41a5daf3222f63df5cdd7c15b3b9703a391c50cda824ab458157fe9c40

    • SHA512

      ff08b437ee58ab4ec6e1466ec650d2cf56a482ee718231620b85509e0c3d5af7bb390e8a34d5ebc0c0aec6718953cff64933981526b968694c80c33110f35012

    • SSDEEP

      6144:YhPZy+chYf9vFAQewiHStKoOZ3j7BAkQd/b+TGCokrArDP6c:gBf9FLlpOJxQdjlD7

MITRE ATT&CK Enterprise v15

Tasks