General

  • Target

    JaffaCakes118_c64d890a3a1937440af6b9bce3df9866

  • Size

    293KB

  • Sample

    250208-xl58esykfy

  • MD5

    c64d890a3a1937440af6b9bce3df9866

  • SHA1

    b03d6f6040819e38b73e59540186e41b0fd016e0

  • SHA256

    6170c9d05a35f56e74d548db25ad8cb557f4f9a2f37f50c3694a4681795f2ace

  • SHA512

    4c46713e3196e3339a2e619906016079aa7256f2d6e9074a0207b809870e199915c566de18c88b686558b56c9103d2801feb9ddded089a2669a64e28d9ef356b

  • SSDEEP

    6144:sTUBzw2l1QO/qN5eOHMY6k5hvhHbFfU4UTrbEi2:Ldta2yRp5dhGdT9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_c64d890a3a1937440af6b9bce3df9866

    • Size

      293KB

    • MD5

      c64d890a3a1937440af6b9bce3df9866

    • SHA1

      b03d6f6040819e38b73e59540186e41b0fd016e0

    • SHA256

      6170c9d05a35f56e74d548db25ad8cb557f4f9a2f37f50c3694a4681795f2ace

    • SHA512

      4c46713e3196e3339a2e619906016079aa7256f2d6e9074a0207b809870e199915c566de18c88b686558b56c9103d2801feb9ddded089a2669a64e28d9ef356b

    • SSDEEP

      6144:sTUBzw2l1QO/qN5eOHMY6k5hvhHbFfU4UTrbEi2:Ldta2yRp5dhGdT9

MITRE ATT&CK Enterprise v15

Tasks