General

  • Target

    JaffaCakes118_d2aeed73dd39dd3ec9f0ca8a3f8a0104

  • Size

    243KB

  • Sample

    250209-xxql4szmbm

  • MD5

    d2aeed73dd39dd3ec9f0ca8a3f8a0104

  • SHA1

    b2f4a0e2f1495a828f70528056d043f08d7083a1

  • SHA256

    d10cf173ba0d042f17d70009de2a577f526ce244941680b61aa5b5740c9e236c

  • SHA512

    76fd092b7ad61694739e94935312aa8c5c8bc04cf624453635bcb4322bafe26518e7b92f7a891e672235fdd4e7a27faf42e8878bd21e097d3ce1c69531a3f668

  • SSDEEP

    6144:WnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:qTKCS2sjWC1rfd/Rtqc7HqkYh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d2aeed73dd39dd3ec9f0ca8a3f8a0104

    • Size

      243KB

    • MD5

      d2aeed73dd39dd3ec9f0ca8a3f8a0104

    • SHA1

      b2f4a0e2f1495a828f70528056d043f08d7083a1

    • SHA256

      d10cf173ba0d042f17d70009de2a577f526ce244941680b61aa5b5740c9e236c

    • SHA512

      76fd092b7ad61694739e94935312aa8c5c8bc04cf624453635bcb4322bafe26518e7b92f7a891e672235fdd4e7a27faf42e8878bd21e097d3ce1c69531a3f668

    • SSDEEP

      6144:WnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:qTKCS2sjWC1rfd/Rtqc7HqkYh

MITRE ATT&CK Enterprise v15

Tasks