General

  • Target

    JaffaCakes118_d21304d7635160dd78d5b9a0670f9d3a

  • Size

    253KB

  • Sample

    250209-whck9symcx

  • MD5

    d21304d7635160dd78d5b9a0670f9d3a

  • SHA1

    542ef575491387b0bd2391b4a486eb7b4fb68188

  • SHA256

    16d98b0f2bb25dc86dc590216e51e3b84b9e16439cf28dfbdc1fafa253f723b3

  • SHA512

    461437df4bc413c90bd1ceee4e9623519482ad5689a902d6626f21c41756a81620c9655f939d83836c0af4e9063dc3a1e4a2e2a95325e8ccedb9e31ba927f957

  • SSDEEP

    3072:0aSh7D7ktA9SWq5TwnVW2BlnOfJcrhfiF7iH7sD/wVrVZsqTFzpA0tOojB5s03hb:gbkgx82eShqligDW/yAOotdhk/wB7DeS

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d21304d7635160dd78d5b9a0670f9d3a

    • Size

      253KB

    • MD5

      d21304d7635160dd78d5b9a0670f9d3a

    • SHA1

      542ef575491387b0bd2391b4a486eb7b4fb68188

    • SHA256

      16d98b0f2bb25dc86dc590216e51e3b84b9e16439cf28dfbdc1fafa253f723b3

    • SHA512

      461437df4bc413c90bd1ceee4e9623519482ad5689a902d6626f21c41756a81620c9655f939d83836c0af4e9063dc3a1e4a2e2a95325e8ccedb9e31ba927f957

    • SSDEEP

      3072:0aSh7D7ktA9SWq5TwnVW2BlnOfJcrhfiF7iH7sD/wVrVZsqTFzpA0tOojB5s03hb:gbkgx82eShqligDW/yAOotdhk/wB7DeS

MITRE ATT&CK Enterprise v15

Tasks