General

  • Target

    JaffaCakes118_b782c3442d1684a31313b0d0fc3ceff3

  • Size

    250KB

  • Sample

    250207-qq281asmdz

  • MD5

    b782c3442d1684a31313b0d0fc3ceff3

  • SHA1

    ad0056d1efe166e0e042c2adb7901e9bff2ad30d

  • SHA256

    f4298e2a4edf04fcb7821e5e1b07bfc5bf15b8f7f5dbb65e1072bd4d4bb85d41

  • SHA512

    56178a6c2daa95b32942c08ce5516f8d90b3d72dc06a103ea05ca369c8c03fa194a5c18ce1c7b94527047058884eaa5c7cd94eb0fcfb634dba03a276d7c1882f

  • SSDEEP

    6144:Wcjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:biuZ6Bq1aMWqBTSV

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b782c3442d1684a31313b0d0fc3ceff3

    • Size

      250KB

    • MD5

      b782c3442d1684a31313b0d0fc3ceff3

    • SHA1

      ad0056d1efe166e0e042c2adb7901e9bff2ad30d

    • SHA256

      f4298e2a4edf04fcb7821e5e1b07bfc5bf15b8f7f5dbb65e1072bd4d4bb85d41

    • SHA512

      56178a6c2daa95b32942c08ce5516f8d90b3d72dc06a103ea05ca369c8c03fa194a5c18ce1c7b94527047058884eaa5c7cd94eb0fcfb634dba03a276d7c1882f

    • SSDEEP

      6144:Wcjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:biuZ6Bq1aMWqBTSV

MITRE ATT&CK Enterprise v15

Tasks