General

  • Target

    JaffaCakes118_34954d08a38c8fa9606a1a3d20504f12

  • Size

    269KB

  • Sample

    250126-l66txaznap

  • MD5

    34954d08a38c8fa9606a1a3d20504f12

  • SHA1

    42cd2af9bf703cdb276e8f3b36525c5c6185665d

  • SHA256

    64b6e336f813afcad57c3cf58f002e5adc8b0c56ba7b4e35a06eb16711f2b80b

  • SHA512

    40c1a398905a3f6e5213db081bdfbb8a98f05f694da78b53d572ffdfb613d5d88c36213224808e21f44129c34717d0ed2437c993987238e6556b113481f51253

  • SSDEEP

    3072:wAn6oNA5f/hK9eb+iY86PLJ83pBw0q6FjctDuFbIbXuUZayuNmhofrwr2LDDHyt2:wA6aAv+5iYPEzF0ZZay/ofrwr0DDHC2n

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_34954d08a38c8fa9606a1a3d20504f12

    • Size

      269KB

    • MD5

      34954d08a38c8fa9606a1a3d20504f12

    • SHA1

      42cd2af9bf703cdb276e8f3b36525c5c6185665d

    • SHA256

      64b6e336f813afcad57c3cf58f002e5adc8b0c56ba7b4e35a06eb16711f2b80b

    • SHA512

      40c1a398905a3f6e5213db081bdfbb8a98f05f694da78b53d572ffdfb613d5d88c36213224808e21f44129c34717d0ed2437c993987238e6556b113481f51253

    • SSDEEP

      3072:wAn6oNA5f/hK9eb+iY86PLJ83pBw0q6FjctDuFbIbXuUZayuNmhofrwr2LDDHyt2:wA6aAv+5iYPEzF0ZZay/ofrwr0DDHC2n

MITRE ATT&CK Enterprise v15

Tasks