General

  • Target

    JaffaCakes118_4369d5837d093583363179b6f8096cbe

  • Size

    275KB

  • Sample

    250127-y9mawsvmhq

  • MD5

    4369d5837d093583363179b6f8096cbe

  • SHA1

    a5b381d642b5e807769b3d912696cff5ab8b530b

  • SHA256

    d367bf62a2d6b748c815cca1e49b0931b7e0879e640f5998142abc0969a74800

  • SHA512

    76bfd5d4c21cdbd7cf42e35588925a23bdec5273eae4d90d6cb87fe437ec625878f5676c4609a7e9ede6969f79f0c72ca50ad343c0a8fdf5bde7c98a4c51a615

  • SSDEEP

    3072:ZlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:1Yi9rkjWJduqyFKrzDTaQ2KlGiX76j

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_4369d5837d093583363179b6f8096cbe

    • Size

      275KB

    • MD5

      4369d5837d093583363179b6f8096cbe

    • SHA1

      a5b381d642b5e807769b3d912696cff5ab8b530b

    • SHA256

      d367bf62a2d6b748c815cca1e49b0931b7e0879e640f5998142abc0969a74800

    • SHA512

      76bfd5d4c21cdbd7cf42e35588925a23bdec5273eae4d90d6cb87fe437ec625878f5676c4609a7e9ede6969f79f0c72ca50ad343c0a8fdf5bde7c98a4c51a615

    • SSDEEP

      3072:ZlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:1Yi9rkjWJduqyFKrzDTaQ2KlGiX76j

MITRE ATT&CK Enterprise v15

Tasks