General

  • Target

    JaffaCakes118_aa0326605f079d91e41a636b83470e85

  • Size

    257KB

  • Sample

    250206-l7snns1rb1

  • MD5

    aa0326605f079d91e41a636b83470e85

  • SHA1

    bac5b6985bc7338c94dc062e23011276d97f1d53

  • SHA256

    49ab6a12b900ed41e6a91c4dc2e588d15a2e9d87b8e078e155b8547e7765a1ed

  • SHA512

    5497e13d6f4190cef49ce4447a05832da1d290c187ddd581ce2406232517d09a8897477c3a44179af8fd654a2bc2021bea78e8485302d00513bff47cf9095336

  • SSDEEP

    3072:QicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:tXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_aa0326605f079d91e41a636b83470e85

    • Size

      257KB

    • MD5

      aa0326605f079d91e41a636b83470e85

    • SHA1

      bac5b6985bc7338c94dc062e23011276d97f1d53

    • SHA256

      49ab6a12b900ed41e6a91c4dc2e588d15a2e9d87b8e078e155b8547e7765a1ed

    • SHA512

      5497e13d6f4190cef49ce4447a05832da1d290c187ddd581ce2406232517d09a8897477c3a44179af8fd654a2bc2021bea78e8485302d00513bff47cf9095336

    • SSDEEP

      3072:QicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:tXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks