General

  • Target

    JaffaCakes118_a1cbafb92a971305aebea1fe94e871f6

  • Size

    257KB

  • Sample

    250205-vkgsbsxpbr

  • MD5

    a1cbafb92a971305aebea1fe94e871f6

  • SHA1

    db0a74657fa9f84e7cbdf9dbe98e81db60df7ee4

  • SHA256

    c48de85cd46f23be76febba84bab2f0c386d5e782e4ebe203abaea5ec829c018

  • SHA512

    831b49306bc58ad79f618b27089f9fb2857fee3dbb20fbef6830c39a9558a0dda8b8d4a103c83507a727a74c6570e4d8e9e962b7c254ce20023720deccfe1bb0

  • SSDEEP

    3072:OicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:bXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_a1cbafb92a971305aebea1fe94e871f6

    • Size

      257KB

    • MD5

      a1cbafb92a971305aebea1fe94e871f6

    • SHA1

      db0a74657fa9f84e7cbdf9dbe98e81db60df7ee4

    • SHA256

      c48de85cd46f23be76febba84bab2f0c386d5e782e4ebe203abaea5ec829c018

    • SHA512

      831b49306bc58ad79f618b27089f9fb2857fee3dbb20fbef6830c39a9558a0dda8b8d4a103c83507a727a74c6570e4d8e9e962b7c254ce20023720deccfe1bb0

    • SSDEEP

      3072:OicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:bXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks