General

  • Target

    JaffaCakes118_abb7bae6d13137b8a7fc8335bdd7a239

  • Size

    284KB

  • Sample

    250206-qrpdjaxrgp

  • MD5

    abb7bae6d13137b8a7fc8335bdd7a239

  • SHA1

    92482886b52f5e00ad21aa3f98c7ae56eb02ce9e

  • SHA256

    3e90a8a49f2603da31200ccbb6c6aecd70a6b295f877ab0e2448dbe705c70111

  • SHA512

    06521a213caad7d96511df43721694b99243641b017f11ce1856b98a6ae275e579b7e033d2c83ca96c4fc967da446b5ea5e67fd6666f413e5981d5a39f62d8b6

  • SSDEEP

    6144:XrkONgf/I/wKkYYOpKZNxOy4BAq7qWDqSPSAxuArt/UDpQ0woccckcE1r5cccpXf:XrlG/gwipKkylqGlSavAh/+Q0woccckc

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_abb7bae6d13137b8a7fc8335bdd7a239

    • Size

      284KB

    • MD5

      abb7bae6d13137b8a7fc8335bdd7a239

    • SHA1

      92482886b52f5e00ad21aa3f98c7ae56eb02ce9e

    • SHA256

      3e90a8a49f2603da31200ccbb6c6aecd70a6b295f877ab0e2448dbe705c70111

    • SHA512

      06521a213caad7d96511df43721694b99243641b017f11ce1856b98a6ae275e579b7e033d2c83ca96c4fc967da446b5ea5e67fd6666f413e5981d5a39f62d8b6

    • SSDEEP

      6144:XrkONgf/I/wKkYYOpKZNxOy4BAq7qWDqSPSAxuArt/UDpQ0woccckcE1r5cccpXf:XrlG/gwipKkylqGlSavAh/+Q0woccckc

MITRE ATT&CK Enterprise v15

Tasks