General

  • Target

    JaffaCakes118_ae2d8b72b674e64dbaabe2586a586b29

  • Size

    267KB

  • Sample

    250206-w3ydgavken

  • MD5

    ae2d8b72b674e64dbaabe2586a586b29

  • SHA1

    ef9c5d14af1760ad776e3f97c1d149dda5317fb1

  • SHA256

    813c795027f6e773f24cae679c7f6fb0df5e40caf065dcb12b266926deb7ec4e

  • SHA512

    63f72c1f4878a6afbd1eb4dcbb053c17b91901ea65340210d6d265990228be5d4be4a59dc026414aff7a3c43b665b2be6f3ae0e20082f82cf7310c3dff6d6e2b

  • SSDEEP

    6144:A4+j1NrPtqmhLOXg83y2WC3d1uf5vQiZKD1dxp/s4:ABllzhLOXr3vW2MfpJZKVpB

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ae2d8b72b674e64dbaabe2586a586b29

    • Size

      267KB

    • MD5

      ae2d8b72b674e64dbaabe2586a586b29

    • SHA1

      ef9c5d14af1760ad776e3f97c1d149dda5317fb1

    • SHA256

      813c795027f6e773f24cae679c7f6fb0df5e40caf065dcb12b266926deb7ec4e

    • SHA512

      63f72c1f4878a6afbd1eb4dcbb053c17b91901ea65340210d6d265990228be5d4be4a59dc026414aff7a3c43b665b2be6f3ae0e20082f82cf7310c3dff6d6e2b

    • SSDEEP

      6144:A4+j1NrPtqmhLOXg83y2WC3d1uf5vQiZKD1dxp/s4:ABllzhLOXr3vW2MfpJZKVpB

MITRE ATT&CK Enterprise v15

Tasks