General

  • Target

    JaffaCakes118_2e4d17d5fcd7a1341d768b1548f8d57a

  • Size

    256KB

  • Sample

    250125-wqvf2swnck

  • MD5

    2e4d17d5fcd7a1341d768b1548f8d57a

  • SHA1

    bf34447a17a6f238033299e03e6e1b8bf8f3cbd5

  • SHA256

    c1915c18e68be361c99a9f7ff749d6c72a6bc753965387b951991e9ae38c0cc6

  • SHA512

    f0b170028918419cabb95459906b6cf775477652038b9b1a9788bef6a3de330e25736ac0cce19dc2a61a7fe1b240118f68446c7701b8d45c7935f3a6a50d45cd

  • SSDEEP

    6144:k/v+QxpMTIxiOSvY987haFsKv8zI/DRuG+kHf1tDoI:kHxpMUcOSvY987UsOMtQnr

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_2e4d17d5fcd7a1341d768b1548f8d57a

    • Size

      256KB

    • MD5

      2e4d17d5fcd7a1341d768b1548f8d57a

    • SHA1

      bf34447a17a6f238033299e03e6e1b8bf8f3cbd5

    • SHA256

      c1915c18e68be361c99a9f7ff749d6c72a6bc753965387b951991e9ae38c0cc6

    • SHA512

      f0b170028918419cabb95459906b6cf775477652038b9b1a9788bef6a3de330e25736ac0cce19dc2a61a7fe1b240118f68446c7701b8d45c7935f3a6a50d45cd

    • SSDEEP

      6144:k/v+QxpMTIxiOSvY987haFsKv8zI/DRuG+kHf1tDoI:kHxpMUcOSvY987UsOMtQnr

MITRE ATT&CK Enterprise v15

Tasks