General

  • Target

    JaffaCakes118_b5fefd56a42c1bdba8f20b0ce386c382

  • Size

    254KB

  • Sample

    250207-md6twayqbm

  • MD5

    b5fefd56a42c1bdba8f20b0ce386c382

  • SHA1

    660cb7d503d517425c54027b7fda8f9cccdf987a

  • SHA256

    a106909f64bd695159637133f88209dd8f72537198adbc17a3eb81ab7164d5d8

  • SHA512

    c8a0a1fe0f8c0a026870d78abc4deb42a795b966d13bae6656a972c91ecf0965104b8b59ef03bddae5cb043dfcc048bded84351c29437ae34df53b09c7f6f850

  • SSDEEP

    6144:aObae2HeMvL4HOrWf0ftMeGWDK9CtYvcmLPyQ0GgeUrrxGQ:aOmNvMU3xNtFmT0GrKGQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b5fefd56a42c1bdba8f20b0ce386c382

    • Size

      254KB

    • MD5

      b5fefd56a42c1bdba8f20b0ce386c382

    • SHA1

      660cb7d503d517425c54027b7fda8f9cccdf987a

    • SHA256

      a106909f64bd695159637133f88209dd8f72537198adbc17a3eb81ab7164d5d8

    • SHA512

      c8a0a1fe0f8c0a026870d78abc4deb42a795b966d13bae6656a972c91ecf0965104b8b59ef03bddae5cb043dfcc048bded84351c29437ae34df53b09c7f6f850

    • SSDEEP

      6144:aObae2HeMvL4HOrWf0ftMeGWDK9CtYvcmLPyQ0GgeUrrxGQ:aOmNvMU3xNtFmT0GrKGQ

MITRE ATT&CK Enterprise v15

Tasks