General

  • Target

    JaffaCakes118_c5b137da338f46898bf7fa2f300dc09e

  • Size

    250KB

  • Sample

    250208-web6bsymbk

  • MD5

    c5b137da338f46898bf7fa2f300dc09e

  • SHA1

    7d9c46f50626cdf3f8c452464733c1ea10d9c193

  • SHA256

    11f9f7f8bae94f693eb503334a9e7e41e8eb57d4d20ed9c5d813fab5c8642685

  • SHA512

    cb858a693ae1feede4e86cb8d9a2a92439d7aa8db4a8b27683042855bfe438e620881ddcc68ad130d3a0ef1f5ef7768698de703c681f1278b36386345fe6d33b

  • SSDEEP

    3072:lGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:7XxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_c5b137da338f46898bf7fa2f300dc09e

    • Size

      250KB

    • MD5

      c5b137da338f46898bf7fa2f300dc09e

    • SHA1

      7d9c46f50626cdf3f8c452464733c1ea10d9c193

    • SHA256

      11f9f7f8bae94f693eb503334a9e7e41e8eb57d4d20ed9c5d813fab5c8642685

    • SHA512

      cb858a693ae1feede4e86cb8d9a2a92439d7aa8db4a8b27683042855bfe438e620881ddcc68ad130d3a0ef1f5ef7768698de703c681f1278b36386345fe6d33b

    • SSDEEP

      3072:lGOFLomQsQtM25LSF12LT8nsQqIbSC3IzSNGOsDGLCpIfMhlGV6T3A/tROoHniXb:7XxQtJ2FSBYr3gOrEhdT3A/tROoHLQ

MITRE ATT&CK Enterprise v15

Tasks