General

  • Target

    JaffaCakes118_ba6190c7d067570d921696d67f005654

  • Size

    255KB

  • Sample

    250207-xm98rsvkam

  • MD5

    ba6190c7d067570d921696d67f005654

  • SHA1

    57f8ee0d18f72460e91ce9f0306ffa458e6b4af4

  • SHA256

    ccfa8ed4ccd0a43a565618dd7f1826cb0cff7be0d67f3a2b6da9f59e56baa110

  • SHA512

    e817d51c71cc88cd7feb31357c007e90e1d9a90c64e0ab6dc6c22100e1840e3d63ca397aabfb9dfa67e8c1c87339f9c4897de4bd2bc2b8b40e5c423455b7acbe

  • SSDEEP

    6144:TNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:TNRdpgdRRoTCD4ijpoix

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ba6190c7d067570d921696d67f005654

    • Size

      255KB

    • MD5

      ba6190c7d067570d921696d67f005654

    • SHA1

      57f8ee0d18f72460e91ce9f0306ffa458e6b4af4

    • SHA256

      ccfa8ed4ccd0a43a565618dd7f1826cb0cff7be0d67f3a2b6da9f59e56baa110

    • SHA512

      e817d51c71cc88cd7feb31357c007e90e1d9a90c64e0ab6dc6c22100e1840e3d63ca397aabfb9dfa67e8c1c87339f9c4897de4bd2bc2b8b40e5c423455b7acbe

    • SSDEEP

      6144:TNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:TNRdpgdRRoTCD4ijpoix

MITRE ATT&CK Enterprise v15

Tasks