General

  • Target

    JaffaCakes118_293484b44abd527fb76349486b25b2b9

  • Size

    263KB

  • Sample

    250125-hr14bssqbj

  • MD5

    293484b44abd527fb76349486b25b2b9

  • SHA1

    01efe46142532d31f5efea2d4075c7af0b49ab5e

  • SHA256

    65d97088bd7a4959f4ca0e119beca72d9de7396086fc45f4e6f2f9049eddef7e

  • SHA512

    6895201815ab7d970d7856a93af1e9859bf3ffb6f2c9d69535ef87a563afc61e98d7bd2cb17df510d2aa1595b1d7f7933ffb17cb7fd42d977ac94620b8b05024

  • SSDEEP

    6144:vbV1mlxAN/u3wGn/c6PYuyJIc907ohkotjQX1kZrrnQ:vBMWVugGn/ftyd9UoCotjQmQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_293484b44abd527fb76349486b25b2b9

    • Size

      263KB

    • MD5

      293484b44abd527fb76349486b25b2b9

    • SHA1

      01efe46142532d31f5efea2d4075c7af0b49ab5e

    • SHA256

      65d97088bd7a4959f4ca0e119beca72d9de7396086fc45f4e6f2f9049eddef7e

    • SHA512

      6895201815ab7d970d7856a93af1e9859bf3ffb6f2c9d69535ef87a563afc61e98d7bd2cb17df510d2aa1595b1d7f7933ffb17cb7fd42d977ac94620b8b05024

    • SSDEEP

      6144:vbV1mlxAN/u3wGn/c6PYuyJIc907ohkotjQX1kZrrnQ:vBMWVugGn/ftyd9UoCotjQmQ

MITRE ATT&CK Enterprise v15

Tasks