General

  • Target

    JaffaCakes118_2ab28b2839890d8355b4db0a6ce3e46a

  • Size

    252KB

  • Sample

    250125-mfjgcsyma1

  • MD5

    2ab28b2839890d8355b4db0a6ce3e46a

  • SHA1

    66d2c5fdc3b6cbbcd30c0f525e14f3c576020b7b

  • SHA256

    57fbd00b534efc6ebe4be5a7cadd297c66588ca228e1f048a4b7290709704c41

  • SHA512

    da4082aef9b1ea9c796346080e7d6cb21eda54dd67a9ddc053f05aa2fc96c4bc3af68156bfa65b7e859f16ebfd9eddc0f52e2be6344e31e4ccd468e8d2667024

  • SSDEEP

    6144:Ug9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:JSJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_2ab28b2839890d8355b4db0a6ce3e46a

    • Size

      252KB

    • MD5

      2ab28b2839890d8355b4db0a6ce3e46a

    • SHA1

      66d2c5fdc3b6cbbcd30c0f525e14f3c576020b7b

    • SHA256

      57fbd00b534efc6ebe4be5a7cadd297c66588ca228e1f048a4b7290709704c41

    • SHA512

      da4082aef9b1ea9c796346080e7d6cb21eda54dd67a9ddc053f05aa2fc96c4bc3af68156bfa65b7e859f16ebfd9eddc0f52e2be6344e31e4ccd468e8d2667024

    • SSDEEP

      6144:Ug9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:JSJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

MITRE ATT&CK Enterprise v15

Tasks