General

  • Target

    JaffaCakes118_ab7d555e85e68b246c013a7b2eaefc3b

  • Size

    255KB

  • Sample

    250206-qa4rwsxncn

  • MD5

    ab7d555e85e68b246c013a7b2eaefc3b

  • SHA1

    e275da9651c1c53d09e54bf37a98922002912a90

  • SHA256

    58297d27511581b191b54c3ceb195f3e6d9835df260708d40f7debdd3f309d32

  • SHA512

    134d820771e43380b29f90847293e503bbd46b4df1a3d6499c152e1b4dc74c8326d8b1aac82aad740102fdd3903390f3d5cb125448204134cd5d3424a5027ec9

  • SSDEEP

    6144:wNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:wNRdpgdRRoTCD4ijpoix

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ab7d555e85e68b246c013a7b2eaefc3b

    • Size

      255KB

    • MD5

      ab7d555e85e68b246c013a7b2eaefc3b

    • SHA1

      e275da9651c1c53d09e54bf37a98922002912a90

    • SHA256

      58297d27511581b191b54c3ceb195f3e6d9835df260708d40f7debdd3f309d32

    • SHA512

      134d820771e43380b29f90847293e503bbd46b4df1a3d6499c152e1b4dc74c8326d8b1aac82aad740102fdd3903390f3d5cb125448204134cd5d3424a5027ec9

    • SSDEEP

      6144:wNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:wNRdpgdRRoTCD4ijpoix

MITRE ATT&CK Enterprise v15

Tasks