General

  • Target

    JaffaCakes118_b7f8022634a60fed4dbbb6713fadb70d

  • Size

    280KB

  • Sample

    250207-rmcdvavpfl

  • MD5

    b7f8022634a60fed4dbbb6713fadb70d

  • SHA1

    df16a0e9a051fc0a675db3b4469c3a2397531b69

  • SHA256

    26c61699a79c4be5d8e6c4b6ffe975062d87982c1c15402dbf353a4a0293f296

  • SHA512

    5c0d57934a8f4eb770c13783c4176233bde8c9fb76bdab199ee2e901adf72b0636703f77cd5fe067c88fe1a436dca363f633b16eb26ad00b3ea6d2ce16d68a8f

  • SSDEEP

    6144:A19B1gfz34hpc+IGqhn3fnMrttUcOBUY6ex0Pf7ZRuu/M1az1pc1MOeP86N3:Afgfz3spc+evnutUHM3H7ZRKaZLrhN3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b7f8022634a60fed4dbbb6713fadb70d

    • Size

      280KB

    • MD5

      b7f8022634a60fed4dbbb6713fadb70d

    • SHA1

      df16a0e9a051fc0a675db3b4469c3a2397531b69

    • SHA256

      26c61699a79c4be5d8e6c4b6ffe975062d87982c1c15402dbf353a4a0293f296

    • SHA512

      5c0d57934a8f4eb770c13783c4176233bde8c9fb76bdab199ee2e901adf72b0636703f77cd5fe067c88fe1a436dca363f633b16eb26ad00b3ea6d2ce16d68a8f

    • SSDEEP

      6144:A19B1gfz34hpc+IGqhn3fnMrttUcOBUY6ex0Pf7ZRuu/M1az1pc1MOeP86N3:Afgfz3spc+evnutUHM3H7ZRKaZLrhN3

MITRE ATT&CK Enterprise v15

Tasks