General

  • Target

    JaffaCakes118_35bf4b16e4493bd81aed994fc149e180

  • Size

    261KB

  • Sample

    250126-qbmvrstjhl

  • MD5

    35bf4b16e4493bd81aed994fc149e180

  • SHA1

    b5c7e796feedb05a582e3d840a183cfb9e6e01dd

  • SHA256

    70b9bd3ee0a1d28bf17ec10506f53395709eefc0f83482f26e33e89b2d1470c9

  • SHA512

    efc867240c212a0027a554c45af6b4f3e02a559595a00175b145ac8cf510440e28c6b22d0bb7c89ba82a3eb7110324bc2af0667a5bed90b46fc02fb12f8961b0

  • SSDEEP

    6144:ZayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:lCua88SEjbEwvpZBZQfZhh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_35bf4b16e4493bd81aed994fc149e180

    • Size

      261KB

    • MD5

      35bf4b16e4493bd81aed994fc149e180

    • SHA1

      b5c7e796feedb05a582e3d840a183cfb9e6e01dd

    • SHA256

      70b9bd3ee0a1d28bf17ec10506f53395709eefc0f83482f26e33e89b2d1470c9

    • SHA512

      efc867240c212a0027a554c45af6b4f3e02a559595a00175b145ac8cf510440e28c6b22d0bb7c89ba82a3eb7110324bc2af0667a5bed90b46fc02fb12f8961b0

    • SSDEEP

      6144:ZayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:lCua88SEjbEwvpZBZQfZhh

MITRE ATT&CK Enterprise v15

Tasks