General

  • Target

    JaffaCakes118_ca5d0475f42c320e2b0e4c0a7cdcc38b

  • Size

    253KB

  • Sample

    250209-dc448avkep

  • MD5

    ca5d0475f42c320e2b0e4c0a7cdcc38b

  • SHA1

    7a53ff662d06998cca005d872c4a60726e33d19d

  • SHA256

    f424f2836bd27be9d7a6316ecb3d83bae160a351c6e065a37fcbf2d643efafa3

  • SHA512

    d6dd977ad5b4cbbbc8dd372b24b18c9050f4c0f7e632b3acdc79667d75dcde43d5aa9bf7f21c3906788cd089157d190f6375d8132c36b221f307e66bdb2a6171

  • SSDEEP

    6144:A3UaFS58Q+Sij0nVGtnQfNmPvwQ5rQidwByQotV:A35E2FjTnOCIQ5rn3QoP

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ca5d0475f42c320e2b0e4c0a7cdcc38b

    • Size

      253KB

    • MD5

      ca5d0475f42c320e2b0e4c0a7cdcc38b

    • SHA1

      7a53ff662d06998cca005d872c4a60726e33d19d

    • SHA256

      f424f2836bd27be9d7a6316ecb3d83bae160a351c6e065a37fcbf2d643efafa3

    • SHA512

      d6dd977ad5b4cbbbc8dd372b24b18c9050f4c0f7e632b3acdc79667d75dcde43d5aa9bf7f21c3906788cd089157d190f6375d8132c36b221f307e66bdb2a6171

    • SSDEEP

      6144:A3UaFS58Q+Sij0nVGtnQfNmPvwQ5rQidwByQotV:A35E2FjTnOCIQ5rn3QoP

MITRE ATT&CK Enterprise v15

Tasks