General

  • Target

    JaffaCakes118_41437e54a22e122e2af8340fcef28961

  • Size

    257KB

  • Sample

    250127-teha8swlex

  • MD5

    41437e54a22e122e2af8340fcef28961

  • SHA1

    643ade32e4c28544725ed5b66e44669de0936212

  • SHA256

    5a21abf421fe6df5b3ef93b50ef8affe395a04f8161b1927c315c669329eb592

  • SHA512

    d5ec419640950691b96c2d48796413f510e087bfab5448fdced25bdeb3b3fb6a1633e20449696398618e7a25475e35f80bd198be807ddf7e6682b54b39310a51

  • SSDEEP

    6144:Z+g/UuZuwAjDwzzCAoyzOC6IvDePVf6MCRON/7:ZCRDqCXyqief68N/7

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_41437e54a22e122e2af8340fcef28961

    • Size

      257KB

    • MD5

      41437e54a22e122e2af8340fcef28961

    • SHA1

      643ade32e4c28544725ed5b66e44669de0936212

    • SHA256

      5a21abf421fe6df5b3ef93b50ef8affe395a04f8161b1927c315c669329eb592

    • SHA512

      d5ec419640950691b96c2d48796413f510e087bfab5448fdced25bdeb3b3fb6a1633e20449696398618e7a25475e35f80bd198be807ddf7e6682b54b39310a51

    • SSDEEP

      6144:Z+g/UuZuwAjDwzzCAoyzOC6IvDePVf6MCRON/7:ZCRDqCXyqief68N/7

MITRE ATT&CK Enterprise v15

Tasks