General

  • Target

    JaffaCakes118_31fffaa5d66382123a7b8a370d0385bb

  • Size

    277KB

  • Sample

    250126-dng4ts1nel

  • MD5

    31fffaa5d66382123a7b8a370d0385bb

  • SHA1

    16d25219311d0816a21b7e95f22b49195632d15f

  • SHA256

    815787a2431956b90164f8b2d8ddbdd0376584a5b7fdcaf1aa2f4bf95607354c

  • SHA512

    ce2a4aded46c64abb0df39016681cc0b2ac881f40e73eeb97cc3882755b41216c4a5eb6abc3ce2f6cc5fe9505afbde13c2af20a7e156c7ae2fb553b91e2f4b8b

  • SSDEEP

    6144:j6FyHwU+uQ5Srp3ybPFQNu8MDKkqZyft8T8cEfkXb1lcD8aDiuYnNlnx5:j7zUAZSKu8U7l5cEG3oTDiVnJ5

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_31fffaa5d66382123a7b8a370d0385bb

    • Size

      277KB

    • MD5

      31fffaa5d66382123a7b8a370d0385bb

    • SHA1

      16d25219311d0816a21b7e95f22b49195632d15f

    • SHA256

      815787a2431956b90164f8b2d8ddbdd0376584a5b7fdcaf1aa2f4bf95607354c

    • SHA512

      ce2a4aded46c64abb0df39016681cc0b2ac881f40e73eeb97cc3882755b41216c4a5eb6abc3ce2f6cc5fe9505afbde13c2af20a7e156c7ae2fb553b91e2f4b8b

    • SSDEEP

      6144:j6FyHwU+uQ5Srp3ybPFQNu8MDKkqZyft8T8cEfkXb1lcD8aDiuYnNlnx5:j7zUAZSKu8U7l5cEG3oTDiVnJ5

MITRE ATT&CK Enterprise v15

Tasks