General

  • Target

    JaffaCakes118_9fd34656619bd08a812875aaab7150d3

  • Size

    257KB

  • Sample

    250205-p7wxwaxkcz

  • MD5

    9fd34656619bd08a812875aaab7150d3

  • SHA1

    61a250b52f2789bfc90e0fd878a3af36ce8c4a99

  • SHA256

    d3252e43c22676c591190945fbafaa29a311c72b0b838c3e6835a534a8af5c2f

  • SHA512

    d1d2a43b20d7376498e9db58b9e05e1cd84c3b8d3d331ed74075187812dcbd63e9bafb21c0b62cd87d5589f7cc54652a8bdfaea4eda1354f4b2e089da31b0a69

  • SSDEEP

    3072:micFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:jXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_9fd34656619bd08a812875aaab7150d3

    • Size

      257KB

    • MD5

      9fd34656619bd08a812875aaab7150d3

    • SHA1

      61a250b52f2789bfc90e0fd878a3af36ce8c4a99

    • SHA256

      d3252e43c22676c591190945fbafaa29a311c72b0b838c3e6835a534a8af5c2f

    • SHA512

      d1d2a43b20d7376498e9db58b9e05e1cd84c3b8d3d331ed74075187812dcbd63e9bafb21c0b62cd87d5589f7cc54652a8bdfaea4eda1354f4b2e089da31b0a69

    • SSDEEP

      3072:micFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:jXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks