General

  • Target

    JaffaCakes118_be31f85f9be6ae03fe97692d30cf7b05

  • Size

    281KB

  • Sample

    250208-dcngga1ld1

  • MD5

    be31f85f9be6ae03fe97692d30cf7b05

  • SHA1

    1f1c04163443b2fcf76fde646b0d90723c735cda

  • SHA256

    562c432528f0e070b42a98db049c7e3b232a2ff32a8ce94b58e0e5738eaed5ef

  • SHA512

    036b78757737a2d887cc4a66da97cd3f9b09166d74dd6a6d02bd63804fa778b5ac49402c957f948a0de1ebe6f195b867f78af35565ab002242c1ccc0411eb433

  • SSDEEP

    6144:DpcnH1hymlUEAsvK7ke5L3iFPwsj9CnL9R6jbKVCA7W5f1uHVOJ:DpYDycUEAWK7SCsj9kLnCAS9IVW

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_be31f85f9be6ae03fe97692d30cf7b05

    • Size

      281KB

    • MD5

      be31f85f9be6ae03fe97692d30cf7b05

    • SHA1

      1f1c04163443b2fcf76fde646b0d90723c735cda

    • SHA256

      562c432528f0e070b42a98db049c7e3b232a2ff32a8ce94b58e0e5738eaed5ef

    • SHA512

      036b78757737a2d887cc4a66da97cd3f9b09166d74dd6a6d02bd63804fa778b5ac49402c957f948a0de1ebe6f195b867f78af35565ab002242c1ccc0411eb433

    • SSDEEP

      6144:DpcnH1hymlUEAsvK7ke5L3iFPwsj9CnL9R6jbKVCA7W5f1uHVOJ:DpYDycUEAWK7SCsj9kLnCAS9IVW

MITRE ATT&CK Enterprise v15

Tasks