General

  • Target

    JaffaCakes118_420fdb3f9161718f970815d8c7b8b328

  • Size

    304KB

  • Sample

    250127-v23q5aznbr

  • MD5

    420fdb3f9161718f970815d8c7b8b328

  • SHA1

    3858d9fb236550c2e6ee7a76ade0ddfd0ef5667b

  • SHA256

    814badc6788b241a6e16a0a6e05b128cb6a0a35d01cfdd396b5675bb32be627e

  • SHA512

    e183d3aea139054527075f3f3c6fa084373d7823aa4cb64c2d3dd1d644fa32086c71de531fca1b9bf8be55983681bcf65d9de3d01099686f54771419c8e49ca8

  • SSDEEP

    6144:3taK1iCzqRDgaE1o71bliASplR29yPhdx2h23FKBRcPsLh+0:U4iCqgN1o715BSHR29yZTFKBRx9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_420fdb3f9161718f970815d8c7b8b328

    • Size

      304KB

    • MD5

      420fdb3f9161718f970815d8c7b8b328

    • SHA1

      3858d9fb236550c2e6ee7a76ade0ddfd0ef5667b

    • SHA256

      814badc6788b241a6e16a0a6e05b128cb6a0a35d01cfdd396b5675bb32be627e

    • SHA512

      e183d3aea139054527075f3f3c6fa084373d7823aa4cb64c2d3dd1d644fa32086c71de531fca1b9bf8be55983681bcf65d9de3d01099686f54771419c8e49ca8

    • SSDEEP

      6144:3taK1iCzqRDgaE1o71bliASplR29yPhdx2h23FKBRcPsLh+0:U4iCqgN1o715BSHR29yZTFKBRx9

MITRE ATT&CK Enterprise v15

Tasks