General

  • Target

    JaffaCakes118_98a93806882da998e27a924e22fb9fe1

  • Size

    257KB

  • Sample

    250204-1wjnyswlgl

  • MD5

    98a93806882da998e27a924e22fb9fe1

  • SHA1

    c9f1a2ecf3fd95ddb22092ffdf0542be09869335

  • SHA256

    c3598570ec7d947211f29e8c71a665fd84c6d026ff10c3cce94b551839693e22

  • SHA512

    4eefdea227bec9fb37dcf8dac56019275ceba95d1f4cef14d4afe7a4e99ae8a71a0c783f906153acf1b16a65faff968b721aa506f978e27777abc5b63086c7c6

  • SSDEEP

    3072:ZicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:4XNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_98a93806882da998e27a924e22fb9fe1

    • Size

      257KB

    • MD5

      98a93806882da998e27a924e22fb9fe1

    • SHA1

      c9f1a2ecf3fd95ddb22092ffdf0542be09869335

    • SHA256

      c3598570ec7d947211f29e8c71a665fd84c6d026ff10c3cce94b551839693e22

    • SHA512

      4eefdea227bec9fb37dcf8dac56019275ceba95d1f4cef14d4afe7a4e99ae8a71a0c783f906153acf1b16a65faff968b721aa506f978e27777abc5b63086c7c6

    • SSDEEP

      3072:ZicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:4XNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks