General

  • Target

    JaffaCakes118_3637201eb61fc6170bb1e7958324dbc8

  • Size

    259KB

  • Sample

    250126-rhg4javlbn

  • MD5

    3637201eb61fc6170bb1e7958324dbc8

  • SHA1

    7c218e4823e558b6f77559bc1deef22f9e5e781c

  • SHA256

    d70ce9c15ce4160bb8f01f1c73429846dc2ecbd2c262c302d4778b3e40337cec

  • SHA512

    9e025bf451e7b1d4c3397a95174ac0d0c45e56f67b0cbbc1da2e5bab4d6a6779d98da26d23c6e871adfab3c057e21984cb05abac27992ae5f39539ea1441ad28

  • SSDEEP

    6144:mTWe9o2bxVyFWkZzJxtejEfWZDkThADnmJRrtZB59:AXoImYuzheQWZAZ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_3637201eb61fc6170bb1e7958324dbc8

    • Size

      259KB

    • MD5

      3637201eb61fc6170bb1e7958324dbc8

    • SHA1

      7c218e4823e558b6f77559bc1deef22f9e5e781c

    • SHA256

      d70ce9c15ce4160bb8f01f1c73429846dc2ecbd2c262c302d4778b3e40337cec

    • SHA512

      9e025bf451e7b1d4c3397a95174ac0d0c45e56f67b0cbbc1da2e5bab4d6a6779d98da26d23c6e871adfab3c057e21984cb05abac27992ae5f39539ea1441ad28

    • SSDEEP

      6144:mTWe9o2bxVyFWkZzJxtejEfWZDkThADnmJRrtZB59:AXoImYuzheQWZAZ

MITRE ATT&CK Enterprise v15

Tasks