General

  • Target

    JaffaCakes118_9c5791b1be350c9d3e4f32dbea6dc187

  • Size

    261KB

  • Sample

    250205-gllk1strgm

  • MD5

    9c5791b1be350c9d3e4f32dbea6dc187

  • SHA1

    cbc166c3efc1fc1837752d214c1a60afe4784ac8

  • SHA256

    9411fc86a71232654bee0c19f2117a09f0579878db06fb2097385a1e180a4167

  • SHA512

    625a2f880bd4181fc141a5e81abb353f2f9e635037b75c1943e66eab776ad500c4b4c769e45ab80ec2e76c215a4b68374f752406c8f7be200b7a6c3b254e5e78

  • SSDEEP

    6144:oayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:SCua88SEjbEwvpZBZQfZhh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_9c5791b1be350c9d3e4f32dbea6dc187

    • Size

      261KB

    • MD5

      9c5791b1be350c9d3e4f32dbea6dc187

    • SHA1

      cbc166c3efc1fc1837752d214c1a60afe4784ac8

    • SHA256

      9411fc86a71232654bee0c19f2117a09f0579878db06fb2097385a1e180a4167

    • SHA512

      625a2f880bd4181fc141a5e81abb353f2f9e635037b75c1943e66eab776ad500c4b4c769e45ab80ec2e76c215a4b68374f752406c8f7be200b7a6c3b254e5e78

    • SSDEEP

      6144:oayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:SCua88SEjbEwvpZBZQfZhh

MITRE ATT&CK Enterprise v15

Tasks