General

  • Target

    JaffaCakes118_b8024109012d32e30f61619ce005ece8

  • Size

    269KB

  • Sample

    250207-rpz8patpfy

  • MD5

    b8024109012d32e30f61619ce005ece8

  • SHA1

    9868f0eeaf2016a927cb1f83bdb0e5e50fdfc0fb

  • SHA256

    f9181a8a592c7a4c43212c80e51a5b2ec153bf899ed1511fa88fb1bced6b96d7

  • SHA512

    0eff59df57fe6bbccd45cee1508591ae7ecdbf247bc003860fd5dc06c81563a0f11f2c7308967e0ce5192341f72ad2b6f5402b43a385d43855aefdd904ab6806

  • SSDEEP

    6144:a/w8abEfC7QCAUtrj89/BskQkWTfZQ0/0cdmiRwxArDUn:a4K6LzHKcvTZQ0/0zJxQDU

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b8024109012d32e30f61619ce005ece8

    • Size

      269KB

    • MD5

      b8024109012d32e30f61619ce005ece8

    • SHA1

      9868f0eeaf2016a927cb1f83bdb0e5e50fdfc0fb

    • SHA256

      f9181a8a592c7a4c43212c80e51a5b2ec153bf899ed1511fa88fb1bced6b96d7

    • SHA512

      0eff59df57fe6bbccd45cee1508591ae7ecdbf247bc003860fd5dc06c81563a0f11f2c7308967e0ce5192341f72ad2b6f5402b43a385d43855aefdd904ab6806

    • SSDEEP

      6144:a/w8abEfC7QCAUtrj89/BskQkWTfZQ0/0cdmiRwxArDUn:a4K6LzHKcvTZQ0/0zJxQDU

MITRE ATT&CK Enterprise v15

Tasks