General

  • Target

    JaffaCakes118_b50e6bf0a0e28e6ba9bceaef5f1a0a99

  • Size

    288KB

  • Sample

    250207-kd1xhsvnex

  • MD5

    b50e6bf0a0e28e6ba9bceaef5f1a0a99

  • SHA1

    04222512c103de41e87fe3997d4a49850cc02c1f

  • SHA256

    63e8482692baeade5ffb319bf7a17926cd7223bbf6cdf23d8a28cd86ac1e982e

  • SHA512

    3db2d06c9e14063761edd6d37f7aa41cc81c63555f932c205e0679e5133c0c10a5b6b6e27698bbfdf8b4d2c9201799d12713a9d2dd063777c810b4804961a395

  • SSDEEP

    6144:KLLlGt4bi8L3AStMeLsumXJ4wIfN3KqBkMpIT42jj+pLwuR:SRyqBDtLKZ4pNr2oLh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b50e6bf0a0e28e6ba9bceaef5f1a0a99

    • Size

      288KB

    • MD5

      b50e6bf0a0e28e6ba9bceaef5f1a0a99

    • SHA1

      04222512c103de41e87fe3997d4a49850cc02c1f

    • SHA256

      63e8482692baeade5ffb319bf7a17926cd7223bbf6cdf23d8a28cd86ac1e982e

    • SHA512

      3db2d06c9e14063761edd6d37f7aa41cc81c63555f932c205e0679e5133c0c10a5b6b6e27698bbfdf8b4d2c9201799d12713a9d2dd063777c810b4804961a395

    • SSDEEP

      6144:KLLlGt4bi8L3AStMeLsumXJ4wIfN3KqBkMpIT42jj+pLwuR:SRyqBDtLKZ4pNr2oLh

MITRE ATT&CK Enterprise v15

Tasks