General

  • Target

    JaffaCakes118_a1d292ac0c0273df4f9cf50f780bf40c

  • Size

    250KB

  • Sample

    250205-vl4cqawjet

  • MD5

    a1d292ac0c0273df4f9cf50f780bf40c

  • SHA1

    6f61daae6c110741bf63598a5a97aa269794b40c

  • SHA256

    00cc12ebb80a2a1dd606ed36e59bcfd0f7cfcdaff10d63dbe8c41d7d436f5d38

  • SHA512

    eeef9e3e91ab995e83a9cd1543c3b3c2b7c55611a15552f71a08091def1b98764803c0f09d191abc7dc7a8d05d381b3e40aa701049de1c7e4cf817f85ba904c8

  • SSDEEP

    6144:m9aL+TmziO5hMpMGcWkOICB4F00XFVjJlyby9MMMMMMfMMMMh:z+CziO5hMmG7tBYJlybyD

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_a1d292ac0c0273df4f9cf50f780bf40c

    • Size

      250KB

    • MD5

      a1d292ac0c0273df4f9cf50f780bf40c

    • SHA1

      6f61daae6c110741bf63598a5a97aa269794b40c

    • SHA256

      00cc12ebb80a2a1dd606ed36e59bcfd0f7cfcdaff10d63dbe8c41d7d436f5d38

    • SHA512

      eeef9e3e91ab995e83a9cd1543c3b3c2b7c55611a15552f71a08091def1b98764803c0f09d191abc7dc7a8d05d381b3e40aa701049de1c7e4cf817f85ba904c8

    • SSDEEP

      6144:m9aL+TmziO5hMpMGcWkOICB4F00XFVjJlyby9MMMMMMfMMMMh:z+CziO5hMmG7tBYJlybyD

MITRE ATT&CK Enterprise v15

Tasks