General

  • Target

    JaffaCakes118_329d52a8a05a5df3a878b593eb87d38a

  • Size

    274KB

  • Sample

    250126-fda9mstndl

  • MD5

    329d52a8a05a5df3a878b593eb87d38a

  • SHA1

    ef8870ba35896f4de8cd89f8be84e473c42adfd5

  • SHA256

    7685225e5c400dbd567445b24b1c178be1b0174fb3af38771d7f4cb27f6bbcb4

  • SHA512

    b657d024d864c11b49e7f3279ad12bbebf757d4b3e222ff7f418efd4f3dc1f269d78cb0d01cf25f7d432d037973ef2bba8260a8e9a7b72be8eebfd02680dc185

  • SSDEEP

    3072:MpGO3F0EzKTQh/v3eeCX6OjL5Flzi0Y217rL74+uR0FU1LpeeQVoKHbRxHF4E:YXFxGEh/vn4jlnzi0jPPseRVPjHF4E

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_329d52a8a05a5df3a878b593eb87d38a

    • Size

      274KB

    • MD5

      329d52a8a05a5df3a878b593eb87d38a

    • SHA1

      ef8870ba35896f4de8cd89f8be84e473c42adfd5

    • SHA256

      7685225e5c400dbd567445b24b1c178be1b0174fb3af38771d7f4cb27f6bbcb4

    • SHA512

      b657d024d864c11b49e7f3279ad12bbebf757d4b3e222ff7f418efd4f3dc1f269d78cb0d01cf25f7d432d037973ef2bba8260a8e9a7b72be8eebfd02680dc185

    • SSDEEP

      3072:MpGO3F0EzKTQh/v3eeCX6OjL5Flzi0Y217rL74+uR0FU1LpeeQVoKHbRxHF4E:YXFxGEh/vn4jlnzi0jPPseRVPjHF4E

MITRE ATT&CK Enterprise v15

Tasks