General

  • Target

    JaffaCakes118_aa894cffae9a6dc732eed8c2fb733f55

  • Size

    276KB

  • Sample

    250206-nctnlavnfr

  • MD5

    aa894cffae9a6dc732eed8c2fb733f55

  • SHA1

    76ef9a4121ff51004c3fa8334b6ecb844620ba01

  • SHA256

    ba5056df25ffde1035afd47e66b25a9b76d76a5a883ff15ef2f6ceb17e175e7b

  • SHA512

    f0bbf1bc7fcef0aa0ce197e1a09cfce38a0045be1e7f83831061908123dcd95d984008e4235eb4066b2d0c6aaf7f562b0ad486360d3b3b069395d82d3eb0c155

  • SSDEEP

    6144:G4P885qxrnbQR8vhTcqHR18lGk9mi+BAENW958AwV:Ga8VxDbbvhpHuGfZBAR51wV

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_aa894cffae9a6dc732eed8c2fb733f55

    • Size

      276KB

    • MD5

      aa894cffae9a6dc732eed8c2fb733f55

    • SHA1

      76ef9a4121ff51004c3fa8334b6ecb844620ba01

    • SHA256

      ba5056df25ffde1035afd47e66b25a9b76d76a5a883ff15ef2f6ceb17e175e7b

    • SHA512

      f0bbf1bc7fcef0aa0ce197e1a09cfce38a0045be1e7f83831061908123dcd95d984008e4235eb4066b2d0c6aaf7f562b0ad486360d3b3b069395d82d3eb0c155

    • SSDEEP

      6144:G4P885qxrnbQR8vhTcqHR18lGk9mi+BAENW958AwV:Ga8VxDbbvhpHuGfZBAR51wV

MITRE ATT&CK Enterprise v15

Tasks