General

  • Target

    JaffaCakes118_b2eca9803a9959a3bce6e5db4698d18b

  • Size

    214KB

  • Sample

    250207-ey86qsznhj

  • MD5

    b2eca9803a9959a3bce6e5db4698d18b

  • SHA1

    2857f4aa440022adc3059cc4478b0c443bb615a4

  • SHA256

    19ee78bf53506ebd23f68f046e2e285f6640820b8dd6846fca25a88c38fee8ed

  • SHA512

    9ed47ac2d0ca210796631a28f905c5e25be6b3ad012e6e4024a07a3ccc7da88e4052fa80ef243ae0b796190af728108073f0d11d0ba6396f8ae98faef385b6ee

  • SSDEEP

    6144:LB8CU+zRg2sK1WIae2QZx7FaaYHOuglK296r:2341+e174aYuPM28

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_b2eca9803a9959a3bce6e5db4698d18b

    • Size

      214KB

    • MD5

      b2eca9803a9959a3bce6e5db4698d18b

    • SHA1

      2857f4aa440022adc3059cc4478b0c443bb615a4

    • SHA256

      19ee78bf53506ebd23f68f046e2e285f6640820b8dd6846fca25a88c38fee8ed

    • SHA512

      9ed47ac2d0ca210796631a28f905c5e25be6b3ad012e6e4024a07a3ccc7da88e4052fa80ef243ae0b796190af728108073f0d11d0ba6396f8ae98faef385b6ee

    • SSDEEP

      6144:LB8CU+zRg2sK1WIae2QZx7FaaYHOuglK296r:2341+e174aYuPM28

MITRE ATT&CK Enterprise v15

Tasks