General

  • Target

    JaffaCakes118_3c27dc1ea06e8e45468977fbbf4aec0d

  • Size

    275KB

  • Sample

    250127-fmecnaslay

  • MD5

    3c27dc1ea06e8e45468977fbbf4aec0d

  • SHA1

    9ef9aadd9c949b71ecb4c2ffbaf9388a05c65ade

  • SHA256

    7134cae79ff825d550c5df228c31e27689ed9f2b5a43b904a14c208e9af23416

  • SHA512

    4597aa34eef54db6002acc6e3693d077180b4d557c0287cfe660c63e0eaf2a793e647901b7b0ee18c0806ccc4e558cdf6b1020e5c59332807fbf25b2549ff66f

  • SSDEEP

    3072:tlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:xYi9rkjWJduqyFKrzDTaQ2KlGiX76j

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_3c27dc1ea06e8e45468977fbbf4aec0d

    • Size

      275KB

    • MD5

      3c27dc1ea06e8e45468977fbbf4aec0d

    • SHA1

      9ef9aadd9c949b71ecb4c2ffbaf9388a05c65ade

    • SHA256

      7134cae79ff825d550c5df228c31e27689ed9f2b5a43b904a14c208e9af23416

    • SHA512

      4597aa34eef54db6002acc6e3693d077180b4d557c0287cfe660c63e0eaf2a793e647901b7b0ee18c0806ccc4e558cdf6b1020e5c59332807fbf25b2549ff66f

    • SSDEEP

      3072:tlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:xYi9rkjWJduqyFKrzDTaQ2KlGiX76j

MITRE ATT&CK Enterprise v15

Tasks