General

  • Target

    JaffaCakes118_d043b35965498956186f068305b95a52

  • Size

    262KB

  • Sample

    250209-rq8lfstpar

  • MD5

    d043b35965498956186f068305b95a52

  • SHA1

    fdd71a1bc01e2a4cd86001f748abc908900a8baf

  • SHA256

    e1867138ee6087aba9ac1e30691c6423170ea395448424ee3cf093af251180b1

  • SHA512

    17be4277d019e6d4ee7f818f79df8fd21820084e5664d89dda1ab41b07ad7a95c04a17925f05960a59cb78cd73502d615b9432b23cea351094da41c9522215fa

  • SSDEEP

    6144:KreHovwlyQclJ8I/sWv+WxSv34f+4cdSFqOo9eKu0dp:UeHoScL8jbWw3/4NFq7YWp

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d043b35965498956186f068305b95a52

    • Size

      262KB

    • MD5

      d043b35965498956186f068305b95a52

    • SHA1

      fdd71a1bc01e2a4cd86001f748abc908900a8baf

    • SHA256

      e1867138ee6087aba9ac1e30691c6423170ea395448424ee3cf093af251180b1

    • SHA512

      17be4277d019e6d4ee7f818f79df8fd21820084e5664d89dda1ab41b07ad7a95c04a17925f05960a59cb78cd73502d615b9432b23cea351094da41c9522215fa

    • SSDEEP

      6144:KreHovwlyQclJ8I/sWv+WxSv34f+4cdSFqOo9eKu0dp:UeHoScL8jbWw3/4NFq7YWp

MITRE ATT&CK Enterprise v15

Tasks