General

  • Target

    JaffaCakes118_a27c79f8d18902de800b4cc906e8a8b9

  • Size

    262KB

  • Sample

    250205-w8e43syjg1

  • MD5

    a27c79f8d18902de800b4cc906e8a8b9

  • SHA1

    b8beb4dbedb917683ac4ea57f695f6dff9c6a5ce

  • SHA256

    70c0ddc63e00dc3d0ea5d20eeeec59fa8e1d8dcd123fb12378f3a196a7c0629a

  • SHA512

    8f47713c4296f840d1578a17ca9e7e214ed5be55757aec704836ce25b6b745a43739537ae7681d06fa8349b592febde496b2ecd7c673b2d82aa0b89bb1da1e12

  • SSDEEP

    3072:p8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:+WQ6HWLs+Eum1RNrkCqddcGRW4P

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_a27c79f8d18902de800b4cc906e8a8b9

    • Size

      262KB

    • MD5

      a27c79f8d18902de800b4cc906e8a8b9

    • SHA1

      b8beb4dbedb917683ac4ea57f695f6dff9c6a5ce

    • SHA256

      70c0ddc63e00dc3d0ea5d20eeeec59fa8e1d8dcd123fb12378f3a196a7c0629a

    • SHA512

      8f47713c4296f840d1578a17ca9e7e214ed5be55757aec704836ce25b6b745a43739537ae7681d06fa8349b592febde496b2ecd7c673b2d82aa0b89bb1da1e12

    • SSDEEP

      3072:p8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:+WQ6HWLs+Eum1RNrkCqddcGRW4P

MITRE ATT&CK Enterprise v15

Tasks