General

  • Target

    JaffaCakes118_3d6348c8b1721e5179cf5efd8d1fbffd

  • Size

    261KB

  • Sample

    250127-jld72szjek

  • MD5

    3d6348c8b1721e5179cf5efd8d1fbffd

  • SHA1

    8daada186a531ae12aaeeecb787b62f46a561db0

  • SHA256

    014500fb17cc9e27d863af550de61048d136e44fb1ba9e37383a8557cef66f1e

  • SHA512

    2e405f09c7159d4d4c9aa2d96917f1ad5db8a5a2bdb671d5dfbadfd7b1e3e2e87545edeb57771ed7401d64b873ac9e0c84c4b24cde744e6539e6d0e87bf703fd

  • SSDEEP

    6144:iayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:cCua88SEjbEwvpZBZQfZhh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_3d6348c8b1721e5179cf5efd8d1fbffd

    • Size

      261KB

    • MD5

      3d6348c8b1721e5179cf5efd8d1fbffd

    • SHA1

      8daada186a531ae12aaeeecb787b62f46a561db0

    • SHA256

      014500fb17cc9e27d863af550de61048d136e44fb1ba9e37383a8557cef66f1e

    • SHA512

      2e405f09c7159d4d4c9aa2d96917f1ad5db8a5a2bdb671d5dfbadfd7b1e3e2e87545edeb57771ed7401d64b873ac9e0c84c4b24cde744e6539e6d0e87bf703fd

    • SSDEEP

      6144:iayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:cCua88SEjbEwvpZBZQfZhh

MITRE ATT&CK Enterprise v15

Tasks