General

  • Target

    JaffaCakes118_a515578f450399ae84a4a4cba3b167fe

  • Size

    257KB

  • Sample

    250205-31mbrayman

  • MD5

    a515578f450399ae84a4a4cba3b167fe

  • SHA1

    1ea39fcea1ee44e0e7dcfa587510c45ac77ba5e8

  • SHA256

    bc7be06e1ee212fdee9bc415afb1df8eda1951bc1dfc358f271f14da42302d0b

  • SHA512

    25bd30807f5bf388b96c68cfb2a4f4880a78edcc30f017d96f8752b41e4b3168a00fd5c7ca2f9d0eb5126e8071312af56c7fbd70f229c8bf258b5ae5d75aea47

  • SSDEEP

    3072:kicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:hXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_a515578f450399ae84a4a4cba3b167fe

    • Size

      257KB

    • MD5

      a515578f450399ae84a4a4cba3b167fe

    • SHA1

      1ea39fcea1ee44e0e7dcfa587510c45ac77ba5e8

    • SHA256

      bc7be06e1ee212fdee9bc415afb1df8eda1951bc1dfc358f271f14da42302d0b

    • SHA512

      25bd30807f5bf388b96c68cfb2a4f4880a78edcc30f017d96f8752b41e4b3168a00fd5c7ca2f9d0eb5126e8071312af56c7fbd70f229c8bf258b5ae5d75aea47

    • SSDEEP

      3072:kicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:hXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks