General

  • Target

    JaffaCakes118_a9a81e6b3cc2e26d6fd53c451d26618b

  • Size

    201KB

  • Sample

    250206-lfbk3szrfv

  • MD5

    a9a81e6b3cc2e26d6fd53c451d26618b

  • SHA1

    dc9a05ada46af90caf85a2dd53021a84a7e84f63

  • SHA256

    123ddb6da0e5681fafd6189e774d0224a03908b7a5bd7b3db917c182340051ab

  • SHA512

    f1796b30b1957a12af311abacab93cd524f1c44e30a493bf6dfa1bfaf0dbb7d2d3f89abdc38c812e2bb6d5003d8ef49de734211f76dca13cb3b7bbf7a0215f1e

  • SSDEEP

    6144:/FQZZuyaYCAgF/8ElUJ4grunG3E3++UZCv2H:/F4HaH9D3grOG3s++UZCv2H

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_a9a81e6b3cc2e26d6fd53c451d26618b

    • Size

      201KB

    • MD5

      a9a81e6b3cc2e26d6fd53c451d26618b

    • SHA1

      dc9a05ada46af90caf85a2dd53021a84a7e84f63

    • SHA256

      123ddb6da0e5681fafd6189e774d0224a03908b7a5bd7b3db917c182340051ab

    • SHA512

      f1796b30b1957a12af311abacab93cd524f1c44e30a493bf6dfa1bfaf0dbb7d2d3f89abdc38c812e2bb6d5003d8ef49de734211f76dca13cb3b7bbf7a0215f1e

    • SSDEEP

      6144:/FQZZuyaYCAgF/8ElUJ4grunG3E3++UZCv2H:/F4HaH9D3grOG3s++UZCv2H

MITRE ATT&CK Enterprise v15

Tasks