General

  • Target

    JaffaCakes118_cf6edab9d70ca8cb18e34d98120ec0f1

  • Size

    243KB

  • Sample

    250209-pyel8s1nhv

  • MD5

    cf6edab9d70ca8cb18e34d98120ec0f1

  • SHA1

    3e54cd35e70a102f083e0e7e5e332c4c77b2b6cc

  • SHA256

    01689f0a91b73d29bac93b8ddf5515e87c21a60d17815babacfe6cdb37bb02b8

  • SHA512

    973c1226009d879e65226e0551867f944849bd2bf1dda0778844715e08d5f8aff2a7599d81400d211d8aa52fe096a7ab31ddb2a79375d62adf2d61c266b127a8

  • SSDEEP

    3072:dpUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:dpUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_cf6edab9d70ca8cb18e34d98120ec0f1

    • Size

      243KB

    • MD5

      cf6edab9d70ca8cb18e34d98120ec0f1

    • SHA1

      3e54cd35e70a102f083e0e7e5e332c4c77b2b6cc

    • SHA256

      01689f0a91b73d29bac93b8ddf5515e87c21a60d17815babacfe6cdb37bb02b8

    • SHA512

      973c1226009d879e65226e0551867f944849bd2bf1dda0778844715e08d5f8aff2a7599d81400d211d8aa52fe096a7ab31ddb2a79375d62adf2d61c266b127a8

    • SSDEEP

      3072:dpUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:dpUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

MITRE ATT&CK Enterprise v15

Tasks