General

  • Target

    JaffaCakes118_9bc611f362c8cf03838e61d45527ebce

  • Size

    203KB

  • Sample

    250205-e9m3ms1rbl

  • MD5

    9bc611f362c8cf03838e61d45527ebce

  • SHA1

    ecd3a3e266c0a98864ec34377af4a32ad427e701

  • SHA256

    36b251fb4116f5ed630e23609351bff58b90ab940823a3741fc01604f018f110

  • SHA512

    c9809287664a76268a3ce46af604ce2cf20d4715b02198b69b6154c3de00d1faab16aad416cd206ef7f736d767edf56fbe9bbacb4f7aa5a6917397de685c3302

  • SSDEEP

    6144:jF5BysCrVqOd4v4wzLe0Xtk4T9IyxZuIl4xvZf:R5BHkNngrz6R

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_9bc611f362c8cf03838e61d45527ebce

    • Size

      203KB

    • MD5

      9bc611f362c8cf03838e61d45527ebce

    • SHA1

      ecd3a3e266c0a98864ec34377af4a32ad427e701

    • SHA256

      36b251fb4116f5ed630e23609351bff58b90ab940823a3741fc01604f018f110

    • SHA512

      c9809287664a76268a3ce46af604ce2cf20d4715b02198b69b6154c3de00d1faab16aad416cd206ef7f736d767edf56fbe9bbacb4f7aa5a6917397de685c3302

    • SSDEEP

      6144:jF5BysCrVqOd4v4wzLe0Xtk4T9IyxZuIl4xvZf:R5BHkNngrz6R

MITRE ATT&CK Enterprise v15

Tasks