General

  • Target

    JaffaCakes118_3c75e7fe2c847688169224ebaeb9b4a3

  • Size

    213KB

  • Sample

    250127-gb96matmgx

  • MD5

    3c75e7fe2c847688169224ebaeb9b4a3

  • SHA1

    92c36e7e2a67f425312a571c1d9f69524f1ae607

  • SHA256

    12844927145d31e21403d61c063ee6b6b3c71acc71ba5cd0ca75a8497efba947

  • SHA512

    c25d2f18a53cd102efb4e9901ba4695a5569df0408fc1a998cb9f2e5c69d1e7af350b46a8e22a48d072e01f088ae3b1d1ff1264564af85d3e67d48621c8d3a6f

  • SSDEEP

    6144:rnT/XLzuguVXMvP9dIFf5tjTBm5nS2FUumkVD4rszhzfiwJ:3vhuVXMvzIFfDQ5dZXJJ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_3c75e7fe2c847688169224ebaeb9b4a3

    • Size

      213KB

    • MD5

      3c75e7fe2c847688169224ebaeb9b4a3

    • SHA1

      92c36e7e2a67f425312a571c1d9f69524f1ae607

    • SHA256

      12844927145d31e21403d61c063ee6b6b3c71acc71ba5cd0ca75a8497efba947

    • SHA512

      c25d2f18a53cd102efb4e9901ba4695a5569df0408fc1a998cb9f2e5c69d1e7af350b46a8e22a48d072e01f088ae3b1d1ff1264564af85d3e67d48621c8d3a6f

    • SSDEEP

      6144:rnT/XLzuguVXMvP9dIFf5tjTBm5nS2FUumkVD4rszhzfiwJ:3vhuVXMvzIFfDQ5dZXJJ

MITRE ATT&CK Enterprise v15

Tasks