General

  • Target

    JaffaCakes118_294770bc9d9b19894e487e2b6d33bda6

  • Size

    255KB

  • Sample

    250125-hxvhqstjbl

  • MD5

    294770bc9d9b19894e487e2b6d33bda6

  • SHA1

    d06b887b5f8f9055dbe39155af467668f2fed750

  • SHA256

    13d4d124825fe2bdb74b53b3f1ea96d039baa6d817fcf46ae74a90b0ed718fe8

  • SHA512

    64d5917d272b2005b951d1176c279f9ee570211d8d65155d778da9f6018aa1f19aa80d6501e401c787b3da3d8f800bf226ebde21513d4de6eeae679224f3082a

  • SSDEEP

    3072:xiG47vmfhnT1unjf9tLEciSWEqF1R/plSaRCKj8Hn7z89NbgjZrTtM8M8Z1yuxZq:xi0J4H+rRZRxjc74DbgjNTiwr+

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_294770bc9d9b19894e487e2b6d33bda6

    • Size

      255KB

    • MD5

      294770bc9d9b19894e487e2b6d33bda6

    • SHA1

      d06b887b5f8f9055dbe39155af467668f2fed750

    • SHA256

      13d4d124825fe2bdb74b53b3f1ea96d039baa6d817fcf46ae74a90b0ed718fe8

    • SHA512

      64d5917d272b2005b951d1176c279f9ee570211d8d65155d778da9f6018aa1f19aa80d6501e401c787b3da3d8f800bf226ebde21513d4de6eeae679224f3082a

    • SSDEEP

      3072:xiG47vmfhnT1unjf9tLEciSWEqF1R/plSaRCKj8Hn7z89NbgjZrTtM8M8Z1yuxZq:xi0J4H+rRZRxjc74DbgjNTiwr+

MITRE ATT&CK Enterprise v15

Tasks