General

  • Target

    JaffaCakes118_a0df2ef5b8ad6ac20035859ce9cee8c5

  • Size

    257KB

  • Sample

    250205-sg2bfstkdm

  • MD5

    a0df2ef5b8ad6ac20035859ce9cee8c5

  • SHA1

    948c2f8b476d9798d1869e243b302e62ced594f8

  • SHA256

    420930ccd70bce77205c31fe566c9dfe440d37d9eb2dc4af453f2ff1288f1af2

  • SHA512

    2563d45bc53bb963450893990f07eb14129ed0b8a5b14fac9ea123bd1aa3d6ecd1db6870aefd8d6ef226aa909f946e21308b2ebf9ea5dc281714256e0e7367de

  • SSDEEP

    3072:FicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:EXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_a0df2ef5b8ad6ac20035859ce9cee8c5

    • Size

      257KB

    • MD5

      a0df2ef5b8ad6ac20035859ce9cee8c5

    • SHA1

      948c2f8b476d9798d1869e243b302e62ced594f8

    • SHA256

      420930ccd70bce77205c31fe566c9dfe440d37d9eb2dc4af453f2ff1288f1af2

    • SHA512

      2563d45bc53bb963450893990f07eb14129ed0b8a5b14fac9ea123bd1aa3d6ecd1db6870aefd8d6ef226aa909f946e21308b2ebf9ea5dc281714256e0e7367de

    • SSDEEP

      3072:FicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:EXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks