General

  • Target

    JaffaCakes118_a1bf2700bb01c12222f4f987d69650f8

  • Size

    243KB

  • Sample

    250205-vfky7axmck

  • MD5

    a1bf2700bb01c12222f4f987d69650f8

  • SHA1

    a1c64a943f292fb22b79027dd05fbcabf7b0845e

  • SHA256

    a9781fe030dd126016bbcd9d9b359292a4da6dee7c84fca661c318a40587767d

  • SHA512

    c1781210b1d7cb1541a01579004d50b34adde87c68fe7b08e5abf9d11401770e3c016a39b8a487ceff3d90aa7bdc616fd104f7092aee92cd3b37bfaf7f84f524

  • SSDEEP

    3072:7pUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:7pUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_a1bf2700bb01c12222f4f987d69650f8

    • Size

      243KB

    • MD5

      a1bf2700bb01c12222f4f987d69650f8

    • SHA1

      a1c64a943f292fb22b79027dd05fbcabf7b0845e

    • SHA256

      a9781fe030dd126016bbcd9d9b359292a4da6dee7c84fca661c318a40587767d

    • SHA512

      c1781210b1d7cb1541a01579004d50b34adde87c68fe7b08e5abf9d11401770e3c016a39b8a487ceff3d90aa7bdc616fd104f7092aee92cd3b37bfaf7f84f524

    • SSDEEP

      3072:7pUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:7pUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

MITRE ATT&CK Enterprise v15

Tasks