General

  • Target

    JaffaCakes118_3a59fb325e523d20f504f97722c72c2a

  • Size

    264KB

  • Sample

    250127-ahs3cs1rgq

  • MD5

    3a59fb325e523d20f504f97722c72c2a

  • SHA1

    0a006a641908d244d8882df278e6f9117951dbe8

  • SHA256

    bc76f6debe526d736a70f644a4337d8f75eeb7db2344669abe8d13f6d63ed16f

  • SHA512

    040798745ab49525c9aaa56c2ae0b86a395289d1d0bdde943bb7ab77384b375fc58c5d1a2ba47d01a8c71e4570bee927ceccf0011f339d54a457929ae6e46a91

  • SSDEEP

    6144:W9+IRHCb/CxEXc3QyPA1eBRboNSz2tFvuzRAK:CJIBMb8NSi3v9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_3a59fb325e523d20f504f97722c72c2a

    • Size

      264KB

    • MD5

      3a59fb325e523d20f504f97722c72c2a

    • SHA1

      0a006a641908d244d8882df278e6f9117951dbe8

    • SHA256

      bc76f6debe526d736a70f644a4337d8f75eeb7db2344669abe8d13f6d63ed16f

    • SHA512

      040798745ab49525c9aaa56c2ae0b86a395289d1d0bdde943bb7ab77384b375fc58c5d1a2ba47d01a8c71e4570bee927ceccf0011f339d54a457929ae6e46a91

    • SSDEEP

      6144:W9+IRHCb/CxEXc3QyPA1eBRboNSz2tFvuzRAK:CJIBMb8NSi3v9

MITRE ATT&CK Enterprise v15

Tasks