General

  • Target

    JaffaCakes118_314b2d5a24c3b6da0c85e3a4f0b197ad

  • Size

    270KB

  • Sample

    250126-bpkv1awraw

  • MD5

    314b2d5a24c3b6da0c85e3a4f0b197ad

  • SHA1

    79a89abfeb8d7f420cdaec83b66746678673fb60

  • SHA256

    9d3d23f4bfd3df920e5441b5f60ee50fc2ffee40e56144215c61cd6c2ded773c

  • SHA512

    514ec0db41cf6f82468934ad367f1850c3e67a9e86338f77d2eaed9bf2028b4f168f7a62f00e73e0784a29b646105f8870aa5101623f2df000c0f86319f1e5f3

  • SSDEEP

    6144:Rs+IN9RS6LTa9Ar37L2We1zwYVlEkdqY/nMmS6H5el8BJN:SHMwm9AHebVKkdrH5eyr

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_314b2d5a24c3b6da0c85e3a4f0b197ad

    • Size

      270KB

    • MD5

      314b2d5a24c3b6da0c85e3a4f0b197ad

    • SHA1

      79a89abfeb8d7f420cdaec83b66746678673fb60

    • SHA256

      9d3d23f4bfd3df920e5441b5f60ee50fc2ffee40e56144215c61cd6c2ded773c

    • SHA512

      514ec0db41cf6f82468934ad367f1850c3e67a9e86338f77d2eaed9bf2028b4f168f7a62f00e73e0784a29b646105f8870aa5101623f2df000c0f86319f1e5f3

    • SSDEEP

      6144:Rs+IN9RS6LTa9Ar37L2We1zwYVlEkdqY/nMmS6H5el8BJN:SHMwm9AHebVKkdrH5eyr

MITRE ATT&CK Enterprise v15

Tasks