General

  • Target

    JaffaCakes118_b2e66e70a3b1a64551dea9b4d88e33a4

  • Size

    280KB

  • Sample

    250209-wwe9baymdl

  • MD5

    b2e66e70a3b1a64551dea9b4d88e33a4

  • SHA1

    2bfc9635df858a3b7e0ddb65916df691763fbfc3

  • SHA256

    75717fe75983c7ef6d2052d4f24a3d9e01d436cea29b1c4797b4b081efbffc01

  • SHA512

    56a65b4135e23fb02ee5349d62149056025bdb19f5a9948482b0acbc6eb9317d5e8449814dbe61fbdca983bd4963d0ef0349726eb61ee3032ea1341adf969fb7

  • SSDEEP

    6144:319B1gfz34hpc+IGqhn3fnMrttUcOBUY6ex0Pf7ZRuu/M1az1pc1MOeP86N3:3fgfz3spc+evnutUHM3H7ZRKaZLrhN3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b2e66e70a3b1a64551dea9b4d88e33a4

    • Size

      280KB

    • MD5

      b2e66e70a3b1a64551dea9b4d88e33a4

    • SHA1

      2bfc9635df858a3b7e0ddb65916df691763fbfc3

    • SHA256

      75717fe75983c7ef6d2052d4f24a3d9e01d436cea29b1c4797b4b081efbffc01

    • SHA512

      56a65b4135e23fb02ee5349d62149056025bdb19f5a9948482b0acbc6eb9317d5e8449814dbe61fbdca983bd4963d0ef0349726eb61ee3032ea1341adf969fb7

    • SSDEEP

      6144:319B1gfz34hpc+IGqhn3fnMrttUcOBUY6ex0Pf7ZRuu/M1az1pc1MOeP86N3:3fgfz3spc+evnutUHM3H7ZRKaZLrhN3

MITRE ATT&CK Enterprise v15

Tasks