General

  • Target

    JaffaCakes118_3e9d6a13fd625587526205a455670c8f

  • Size

    254KB

  • Sample

    250127-mfg9astpay

  • MD5

    3e9d6a13fd625587526205a455670c8f

  • SHA1

    24d3899f55176cc770115a5af98b9433cec1a94d

  • SHA256

    9a29e0362a040138a4674a16559578222b2f771b05c38d5f30dda6ed5f1f67ba

  • SHA512

    925aad5e65948906caab94797e46465d30b4042b821867b0006dfcacb3348aafbf2a0edbf7f4dfc8c81da8462bf559d4d6f0de4cf893efa890456104a3d1c811

  • SSDEEP

    6144:YZx4wXije2Pyp4qHv5e4xrnMdyaIlrAB/M+IJGSC8e:YZx3XiLap42xDXFrAJMHGt

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_3e9d6a13fd625587526205a455670c8f

    • Size

      254KB

    • MD5

      3e9d6a13fd625587526205a455670c8f

    • SHA1

      24d3899f55176cc770115a5af98b9433cec1a94d

    • SHA256

      9a29e0362a040138a4674a16559578222b2f771b05c38d5f30dda6ed5f1f67ba

    • SHA512

      925aad5e65948906caab94797e46465d30b4042b821867b0006dfcacb3348aafbf2a0edbf7f4dfc8c81da8462bf559d4d6f0de4cf893efa890456104a3d1c811

    • SSDEEP

      6144:YZx4wXije2Pyp4qHv5e4xrnMdyaIlrAB/M+IJGSC8e:YZx3XiLap42xDXFrAJMHGt

MITRE ATT&CK Enterprise v15

Tasks