General

  • Target

    JaffaCakes118_4501668d6897b2b886b40bd263e9a387

  • Size

    258KB

  • Sample

    250128-ankyyazrew

  • MD5

    4501668d6897b2b886b40bd263e9a387

  • SHA1

    b7e57122f49a5ea1bd1f58e755a51be856623078

  • SHA256

    73cabc9669a5017bfd3bf4fb6ac46c6ca4c3d2e47716bd1fe662bb8cd63bbbfa

  • SHA512

    a0535c83caacd0e86cb899e607e958d46b48622c1e849a9baa0042425e7be03dd60ca9a8c83645bf3dea4902c9ec7ad9aafe1537cf4dea391fb49f60eea58eaf

  • SSDEEP

    3072:3FgNx7UOOrEHuOMwhvLqJhacw8kgrY1ymk2+oRVDqc9ZZIap1ak4yfeVMB0anXBQ:36TOrEHJNUkgU5m0ZOMcCWw+PGlW

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_4501668d6897b2b886b40bd263e9a387

    • Size

      258KB

    • MD5

      4501668d6897b2b886b40bd263e9a387

    • SHA1

      b7e57122f49a5ea1bd1f58e755a51be856623078

    • SHA256

      73cabc9669a5017bfd3bf4fb6ac46c6ca4c3d2e47716bd1fe662bb8cd63bbbfa

    • SHA512

      a0535c83caacd0e86cb899e607e958d46b48622c1e849a9baa0042425e7be03dd60ca9a8c83645bf3dea4902c9ec7ad9aafe1537cf4dea391fb49f60eea58eaf

    • SSDEEP

      3072:3FgNx7UOOrEHuOMwhvLqJhacw8kgrY1ymk2+oRVDqc9ZZIap1ak4yfeVMB0anXBQ:36TOrEHJNUkgU5m0ZOMcCWw+PGlW

MITRE ATT&CK Enterprise v15

Tasks