General

  • Target

    JaffaCakes118_ab2e373c9b77629bf43faba97a011db2

  • Size

    252KB

  • Sample

    250206-pnhadawrap

  • MD5

    ab2e373c9b77629bf43faba97a011db2

  • SHA1

    76113e20d7e4abc1d7a833096dcd4be62ec38ca5

  • SHA256

    018a98f12b8b7912c062e4bfd8eca09b6d3310c64f78eabfa146568cd0cd54c1

  • SHA512

    94efa47bc16f7b34365de28018854018572b15a2e1d54e2aa41965fe7eee83c00dea2326ed034235898c8cefe5ac4749fe1cd6bbd6b1c3f9bc507de1f3a9ec24

  • SSDEEP

    6144:1g9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:ISJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ab2e373c9b77629bf43faba97a011db2

    • Size

      252KB

    • MD5

      ab2e373c9b77629bf43faba97a011db2

    • SHA1

      76113e20d7e4abc1d7a833096dcd4be62ec38ca5

    • SHA256

      018a98f12b8b7912c062e4bfd8eca09b6d3310c64f78eabfa146568cd0cd54c1

    • SHA512

      94efa47bc16f7b34365de28018854018572b15a2e1d54e2aa41965fe7eee83c00dea2326ed034235898c8cefe5ac4749fe1cd6bbd6b1c3f9bc507de1f3a9ec24

    • SSDEEP

      6144:1g9SJ3GmB+gw8quOMdwD5xTse7P+BMbA5QwEgNV0gShqlHfl:ISJWmMB6OM6VxAeD+qbA5LEgNKhCHfl

MITRE ATT&CK Enterprise v15

Tasks