General

  • Target

    JaffaCakes118_392fad2a6c6f80112bf069c389c36054

  • Size

    262KB

  • Sample

    250126-zycsravmaq

  • MD5

    392fad2a6c6f80112bf069c389c36054

  • SHA1

    15a539e6a9fa2ecb9552a636f5c26c2a6f1f9104

  • SHA256

    6963ecd545c9adc4e9b5ec2d273dceab26ce273c30d32d383e07e8df13e1fb17

  • SHA512

    1f9036afff268c7fd34900fea8b78b3fd97aa94d2dcf8b7e31e2d093baa762ccb3921ea462e0983f93fd81cb2922a800a8973d15854d160c5e66c49b4821dce4

  • SSDEEP

    3072:n8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:AWQ6HWLs+Eum1RNrkCqddcGRW4P

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_392fad2a6c6f80112bf069c389c36054

    • Size

      262KB

    • MD5

      392fad2a6c6f80112bf069c389c36054

    • SHA1

      15a539e6a9fa2ecb9552a636f5c26c2a6f1f9104

    • SHA256

      6963ecd545c9adc4e9b5ec2d273dceab26ce273c30d32d383e07e8df13e1fb17

    • SHA512

      1f9036afff268c7fd34900fea8b78b3fd97aa94d2dcf8b7e31e2d093baa762ccb3921ea462e0983f93fd81cb2922a800a8973d15854d160c5e66c49b4821dce4

    • SSDEEP

      3072:n8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:AWQ6HWLs+Eum1RNrkCqddcGRW4P

MITRE ATT&CK Enterprise v15

Tasks