General

  • Target

    JaffaCakes118_31a4f6b55c27b154a946e52f253a51ba

  • Size

    275KB

  • Sample

    250126-cnwrjszmcl

  • MD5

    31a4f6b55c27b154a946e52f253a51ba

  • SHA1

    8082e2c7bcf3844fb4bedf1353a9958846bfd490

  • SHA256

    8537df285f96c1b2844b7dadd7d0ea648bfeada511aa09274122625bbea171f7

  • SHA512

    ba89db9c5ec3d05e42c665c359971cd0ce44df8bb1206a0fc0117e265eedb7e445be8dcab32ffc9ef0190bbe1c68dce5b5161f4d8a429fe5b0b6901a1982c314

  • SSDEEP

    3072:WlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:AYi9rkjWJduqyFKrzDTaQ2KlGiX76j

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_31a4f6b55c27b154a946e52f253a51ba

    • Size

      275KB

    • MD5

      31a4f6b55c27b154a946e52f253a51ba

    • SHA1

      8082e2c7bcf3844fb4bedf1353a9958846bfd490

    • SHA256

      8537df285f96c1b2844b7dadd7d0ea648bfeada511aa09274122625bbea171f7

    • SHA512

      ba89db9c5ec3d05e42c665c359971cd0ce44df8bb1206a0fc0117e265eedb7e445be8dcab32ffc9ef0190bbe1c68dce5b5161f4d8a429fe5b0b6901a1982c314

    • SSDEEP

      3072:WlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:AYi9rkjWJduqyFKrzDTaQ2KlGiX76j

MITRE ATT&CK Enterprise v15

Tasks