General

  • Target

    JaffaCakes118_b6658a9962e40520139c1354b1cc4a8d

  • Size

    268KB

  • Sample

    250207-nam32aznan

  • MD5

    b6658a9962e40520139c1354b1cc4a8d

  • SHA1

    0826499a2a0015b33ec0c2462353649cae3f97f5

  • SHA256

    6298de11b00b42af03ff667017a27fc6c1a17bd79af6eb2483454f604004682e

  • SHA512

    afa3792c244d2d62975ceed3cd151648f2d8db1fa8b4129e50c14dd96282030345d0e255ca85181b440c5f9a26e2d1399aee99278b3b8fa6d0bdececef7fbfd1

  • SSDEEP

    6144:p5q4MjTknKcjwzfxOZ9TdIEHFJW4CBEcdCfY1xaiqfIpvN20VEbVDy:JATkKbbxI9CEHFJzCCsCfYWivpvN20T

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b6658a9962e40520139c1354b1cc4a8d

    • Size

      268KB

    • MD5

      b6658a9962e40520139c1354b1cc4a8d

    • SHA1

      0826499a2a0015b33ec0c2462353649cae3f97f5

    • SHA256

      6298de11b00b42af03ff667017a27fc6c1a17bd79af6eb2483454f604004682e

    • SHA512

      afa3792c244d2d62975ceed3cd151648f2d8db1fa8b4129e50c14dd96282030345d0e255ca85181b440c5f9a26e2d1399aee99278b3b8fa6d0bdececef7fbfd1

    • SSDEEP

      6144:p5q4MjTknKcjwzfxOZ9TdIEHFJW4CBEcdCfY1xaiqfIpvN20VEbVDy:JATkKbbxI9CEHFJzCCsCfYWivpvN20T

MITRE ATT&CK Enterprise v15

Tasks