General

  • Target

    JaffaCakes118_af8adae2a36646e83c38b4f4fabd929f

  • Size

    285KB

  • Sample

    250206-1blb2szjcl

  • MD5

    af8adae2a36646e83c38b4f4fabd929f

  • SHA1

    790f64326876a5177e52e3f0bc6c84ab0a68c6ab

  • SHA256

    4f47df8c4182d198caa01025560829d0060b9f9deedca4f2d1938d24d6ee712e

  • SHA512

    c5a972152016e5b7c05401df51c7abe6a2656088b83a92b2dfdb80e14594c0d41eb3608acd4ebb421ade33ea78906484c83f52c3441d1accd7b670c8d384e170

  • SSDEEP

    6144:w9/W7uXa6C+aetJBsP2A5Zgh9hfyWzHel+p3BlT82zk:wFW7uq6//HA5k9yWz+wX58Mk

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_af8adae2a36646e83c38b4f4fabd929f

    • Size

      285KB

    • MD5

      af8adae2a36646e83c38b4f4fabd929f

    • SHA1

      790f64326876a5177e52e3f0bc6c84ab0a68c6ab

    • SHA256

      4f47df8c4182d198caa01025560829d0060b9f9deedca4f2d1938d24d6ee712e

    • SHA512

      c5a972152016e5b7c05401df51c7abe6a2656088b83a92b2dfdb80e14594c0d41eb3608acd4ebb421ade33ea78906484c83f52c3441d1accd7b670c8d384e170

    • SSDEEP

      6144:w9/W7uXa6C+aetJBsP2A5Zgh9hfyWzHel+p3BlT82zk:wFW7uq6//HA5k9yWz+wX58Mk

MITRE ATT&CK Enterprise v15

Tasks