General

  • Target

    JaffaCakes118_a10c7203f9dc0f400c2ab946dfc75118

  • Size

    257KB

  • Sample

    250205-swxxksslfw

  • MD5

    a10c7203f9dc0f400c2ab946dfc75118

  • SHA1

    ecaea4af17ff560c1f434e548b0356c06890f1de

  • SHA256

    4a1f4f640c191e211ce64d2df698aba3b8fc1211e30ad4a3e9abd8a4dbc909ad

  • SHA512

    3dfe30245daf82e0c048d0835ecac9ae13bb2d3ab79860f9d66b62386521bc0f1bd124823b2df9dae10a25a158725f18ee6000f061e8d3872a847db988e29ec2

  • SSDEEP

    3072:KicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:XXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_a10c7203f9dc0f400c2ab946dfc75118

    • Size

      257KB

    • MD5

      a10c7203f9dc0f400c2ab946dfc75118

    • SHA1

      ecaea4af17ff560c1f434e548b0356c06890f1de

    • SHA256

      4a1f4f640c191e211ce64d2df698aba3b8fc1211e30ad4a3e9abd8a4dbc909ad

    • SHA512

      3dfe30245daf82e0c048d0835ecac9ae13bb2d3ab79860f9d66b62386521bc0f1bd124823b2df9dae10a25a158725f18ee6000f061e8d3872a847db988e29ec2

    • SSDEEP

      3072:KicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:XXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks