General

  • Target

    JaffaCakes118_40c4cafc15c70211ac617e587de4b13b

  • Size

    256KB

  • Sample

    250127-sd5vgavlam

  • MD5

    40c4cafc15c70211ac617e587de4b13b

  • SHA1

    21e4b2dee170386d31bc31eb4659988836a24450

  • SHA256

    c0f01f21b3affc4259809d5bff4b0df5d2a2f19d3c138b5e690a8bc269925bcf

  • SHA512

    ea23c2a3b259da4afe88cbb3a6b0cb4182ef2f374841df160f5c0de9018494c700e0509a61e961ed15dfe7c3f964ed5c34b310c55b6b6c264f6bec229859ee6f

  • SSDEEP

    6144:huX3KDm/ePKTxu/q3yrvpjwzFST68tw8Trx7exH5qRpc:AXQK1cIyrv90STRaZq3c

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_40c4cafc15c70211ac617e587de4b13b

    • Size

      256KB

    • MD5

      40c4cafc15c70211ac617e587de4b13b

    • SHA1

      21e4b2dee170386d31bc31eb4659988836a24450

    • SHA256

      c0f01f21b3affc4259809d5bff4b0df5d2a2f19d3c138b5e690a8bc269925bcf

    • SHA512

      ea23c2a3b259da4afe88cbb3a6b0cb4182ef2f374841df160f5c0de9018494c700e0509a61e961ed15dfe7c3f964ed5c34b310c55b6b6c264f6bec229859ee6f

    • SSDEEP

      6144:huX3KDm/ePKTxu/q3yrvpjwzFST68tw8Trx7exH5qRpc:AXQK1cIyrv90STRaZq3c

MITRE ATT&CK Enterprise v15

Tasks