General

  • Target

    JaffaCakes118_9ef0989a48cfc4c7c073eb3e7743102b

  • Size

    254KB

  • Sample

    250205-m4qwcavncj

  • MD5

    9ef0989a48cfc4c7c073eb3e7743102b

  • SHA1

    1738bc744f62e9609bc1762fa9616ed934d0b995

  • SHA256

    c1c1d9741f1e611c17b6ea18770d26274ec5cb2e1e6d7c64cfd6f94126ef085a

  • SHA512

    88f6311204c123031c880e05ff7ceaa300293d1137a631068e9737ceb8effe7c2e4ac0bb1c8993e0fb5d0d086229d6ebdd9622a4cb2b67c55eb368f26fffbf06

  • SSDEEP

    6144:YS9BWPE8aYrQl9LD3fWXWSRyfmX0aP2I8wYRjgzy0:tmE8aYrGPMWSR+mX0aPl8te

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_9ef0989a48cfc4c7c073eb3e7743102b

    • Size

      254KB

    • MD5

      9ef0989a48cfc4c7c073eb3e7743102b

    • SHA1

      1738bc744f62e9609bc1762fa9616ed934d0b995

    • SHA256

      c1c1d9741f1e611c17b6ea18770d26274ec5cb2e1e6d7c64cfd6f94126ef085a

    • SHA512

      88f6311204c123031c880e05ff7ceaa300293d1137a631068e9737ceb8effe7c2e4ac0bb1c8993e0fb5d0d086229d6ebdd9622a4cb2b67c55eb368f26fffbf06

    • SSDEEP

      6144:YS9BWPE8aYrQl9LD3fWXWSRyfmX0aP2I8wYRjgzy0:tmE8aYrGPMWSR+mX0aPl8te

MITRE ATT&CK Enterprise v15

Tasks