General

  • Target

    JaffaCakes118_406b0b24a6cda943551e8c96b7027529

  • Size

    275KB

  • Sample

    250127-rmpzyatjbk

  • MD5

    406b0b24a6cda943551e8c96b7027529

  • SHA1

    440ff682e566a7497f27f7f41abe6f0d3800b636

  • SHA256

    d6f889b0d8b50840f45c334872801719a06e999b868d4bda3e89919b6a8b6166

  • SHA512

    85467b23f3c4df37e7f9495d2d86e8e0ab6c3d21999b60f2a19ce299949847c04904c802bacb39a294c39a6ee643fa4e4fcd4c1006d6ff0d5a83d20be6515a4b

  • SSDEEP

    6144:f2J9n/ekxcnYvkGc9plVQYsvkk2EOqpJjSsTS:f2JUcX8LvVQY8kk2EO+d

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_406b0b24a6cda943551e8c96b7027529

    • Size

      275KB

    • MD5

      406b0b24a6cda943551e8c96b7027529

    • SHA1

      440ff682e566a7497f27f7f41abe6f0d3800b636

    • SHA256

      d6f889b0d8b50840f45c334872801719a06e999b868d4bda3e89919b6a8b6166

    • SHA512

      85467b23f3c4df37e7f9495d2d86e8e0ab6c3d21999b60f2a19ce299949847c04904c802bacb39a294c39a6ee643fa4e4fcd4c1006d6ff0d5a83d20be6515a4b

    • SSDEEP

      6144:f2J9n/ekxcnYvkGc9plVQYsvkk2EOqpJjSsTS:f2JUcX8LvVQY8kk2EO+d

MITRE ATT&CK Enterprise v15

Tasks