General

  • Target

    JaffaCakes118_b9880ec35fc1d4a2823e9a0682a32bc4

  • Size

    262KB

  • Sample

    250207-v1trtszmgt

  • MD5

    b9880ec35fc1d4a2823e9a0682a32bc4

  • SHA1

    0c60d87bf467832b7f97338ff451ce45028c664f

  • SHA256

    b3aa22c95bdd72b8072ccb6876c106ded2d3e93d845e15afee03d4b3159a74ba

  • SHA512

    42e1f0fdc92d2ba5b6597328a5b517a4b026947959f19cacf85e91c512bed0c8733c2c5897c2e7d36c53a1a718be879b15b148962ece37a79a659b8f73617354

  • SSDEEP

    6144:0wf1c+G/3K/IkaKqCcVgdWBDcY+/OGExrrQ:0Qmh/a/IhOcydMR+/OG6rQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b9880ec35fc1d4a2823e9a0682a32bc4

    • Size

      262KB

    • MD5

      b9880ec35fc1d4a2823e9a0682a32bc4

    • SHA1

      0c60d87bf467832b7f97338ff451ce45028c664f

    • SHA256

      b3aa22c95bdd72b8072ccb6876c106ded2d3e93d845e15afee03d4b3159a74ba

    • SHA512

      42e1f0fdc92d2ba5b6597328a5b517a4b026947959f19cacf85e91c512bed0c8733c2c5897c2e7d36c53a1a718be879b15b148962ece37a79a659b8f73617354

    • SSDEEP

      6144:0wf1c+G/3K/IkaKqCcVgdWBDcY+/OGExrrQ:0Qmh/a/IhOcydMR+/OG6rQ

MITRE ATT&CK Enterprise v15

Tasks