General

  • Target

    JaffaCakes118_b315be8c64d6bdd274abe47b720af4fe

  • Size

    257KB

  • Sample

    250207-fbejaa1jfp

  • MD5

    b315be8c64d6bdd274abe47b720af4fe

  • SHA1

    45f1e278fe88d0f925c0e500151727454ecd5eb9

  • SHA256

    bd87a1a5cd81baa8625bd12a48472d81098843a6b45730c1d921fc60e62444fa

  • SHA512

    a50f40c123d19e754df6c83d3d4dfa2c7b3683ac41fe77042b837f25fb6faf99382e162f4e491b19fe9d53f4ac65dbdcf3da92b9a2f8092436b4b09b32d00a24

  • SSDEEP

    3072:IicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:VXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b315be8c64d6bdd274abe47b720af4fe

    • Size

      257KB

    • MD5

      b315be8c64d6bdd274abe47b720af4fe

    • SHA1

      45f1e278fe88d0f925c0e500151727454ecd5eb9

    • SHA256

      bd87a1a5cd81baa8625bd12a48472d81098843a6b45730c1d921fc60e62444fa

    • SHA512

      a50f40c123d19e754df6c83d3d4dfa2c7b3683ac41fe77042b837f25fb6faf99382e162f4e491b19fe9d53f4ac65dbdcf3da92b9a2f8092436b4b09b32d00a24

    • SSDEEP

      3072:IicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:VXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks