General

  • Target

    JaffaCakes118_3d6aa72d17c46e8c2774070786c81fa4

  • Size

    254KB

  • Sample

    250127-jnayeazkeq

  • MD5

    3d6aa72d17c46e8c2774070786c81fa4

  • SHA1

    b7eb460e446a715ad275152db846a1e6daa0a7d3

  • SHA256

    a05e492ad991f1dfebaf869b88be40f79aa13a118cb52dc982d46398fcddd8a7

  • SHA512

    d859f14ebcaa38a813d7854a2937fa120f6a5401a8c4d1b0aea1151e2cf9d35ca323da5d79d83b8355d032120f161b2a3f1c4e681c6cbdfb002ea50b00a41e7c

  • SSDEEP

    6144:EZx4wXije2Pyp4qHv5e4xrnMdyaIlrAB/M+IJGSC8e:EZx3XiLap42xDXFrAJMHGt

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_3d6aa72d17c46e8c2774070786c81fa4

    • Size

      254KB

    • MD5

      3d6aa72d17c46e8c2774070786c81fa4

    • SHA1

      b7eb460e446a715ad275152db846a1e6daa0a7d3

    • SHA256

      a05e492ad991f1dfebaf869b88be40f79aa13a118cb52dc982d46398fcddd8a7

    • SHA512

      d859f14ebcaa38a813d7854a2937fa120f6a5401a8c4d1b0aea1151e2cf9d35ca323da5d79d83b8355d032120f161b2a3f1c4e681c6cbdfb002ea50b00a41e7c

    • SSDEEP

      6144:EZx4wXije2Pyp4qHv5e4xrnMdyaIlrAB/M+IJGSC8e:EZx3XiLap42xDXFrAJMHGt

MITRE ATT&CK Enterprise v15

Tasks