General

  • Target

    JaffaCakes118_b34d72ae76f753ac2196672210e54583

  • Size

    250KB

  • Sample

    250207-frffhszldy

  • MD5

    b34d72ae76f753ac2196672210e54583

  • SHA1

    26f53c0abdfe7260d0e9fbc0b16a1516719f4125

  • SHA256

    d1391f2d83e351d3d10b06d5d12042298853222a6f533bf7e43660d35ce82750

  • SHA512

    0d27d9d6520870032df9e3abae3065f71b972accf40c7a48e14d759b6f66179c7f7e5d03f815dc35d68e02f38a9d67e205c4af52f1e0659898d351ae0bacb59f

  • SSDEEP

    3072:sGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:qXxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b34d72ae76f753ac2196672210e54583

    • Size

      250KB

    • MD5

      b34d72ae76f753ac2196672210e54583

    • SHA1

      26f53c0abdfe7260d0e9fbc0b16a1516719f4125

    • SHA256

      d1391f2d83e351d3d10b06d5d12042298853222a6f533bf7e43660d35ce82750

    • SHA512

      0d27d9d6520870032df9e3abae3065f71b972accf40c7a48e14d759b6f66179c7f7e5d03f815dc35d68e02f38a9d67e205c4af52f1e0659898d351ae0bacb59f

    • SSDEEP

      3072:sGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:qXxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

MITRE ATT&CK Enterprise v15

Tasks