General

  • Target

    JaffaCakes118_c030a272f73bb75ce5e7fa45ffff64ac

  • Size

    257KB

  • Sample

    250208-hkk4jaspam

  • MD5

    c030a272f73bb75ce5e7fa45ffff64ac

  • SHA1

    0b6b5f017da9df7ff0ab3c9f143b393be23ee5b8

  • SHA256

    70a25d31536063c5f0b2457a2d8b74c359806371c62328491115bf6c184a00a2

  • SHA512

    877754fe5f7df0b6d5cf7dc786af35e0a772e2227f057c1888d8d925edeb4ce98293cef76a3796e9420e4786aeefb782d17429f3c89c6d79b2a460e8e1dc2c97

  • SSDEEP

    3072:EicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:BXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_c030a272f73bb75ce5e7fa45ffff64ac

    • Size

      257KB

    • MD5

      c030a272f73bb75ce5e7fa45ffff64ac

    • SHA1

      0b6b5f017da9df7ff0ab3c9f143b393be23ee5b8

    • SHA256

      70a25d31536063c5f0b2457a2d8b74c359806371c62328491115bf6c184a00a2

    • SHA512

      877754fe5f7df0b6d5cf7dc786af35e0a772e2227f057c1888d8d925edeb4ce98293cef76a3796e9420e4786aeefb782d17429f3c89c6d79b2a460e8e1dc2c97

    • SSDEEP

      3072:EicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:BXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks