General

  • Target

    JaffaCakes118_d2ff38caba8e4b002d20bd881ca20c32

  • Size

    268KB

  • Sample

    250209-yh2aqs1kdy

  • MD5

    d2ff38caba8e4b002d20bd881ca20c32

  • SHA1

    e3eda16eee59623c9af0a1bf3fb117673300c665

  • SHA256

    9499ac5ede949c1a10148592b7d3af2aac1dd1550d5afd50969de7fb44293af7

  • SHA512

    10e7127d8c7a5ff42d7f2f5f6aa29c0d66c984b3a8e976ab1c0e924b4eada252f101e8d450e5e1d1386638089000953aa57e2e86b4c721159ef54c3a784f5f34

  • SSDEEP

    6144:pRkn+alqMqDoV0L29KQWFte1RfUuSDe+ArH:pRg+allJ0LcKNyR3SM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d2ff38caba8e4b002d20bd881ca20c32

    • Size

      268KB

    • MD5

      d2ff38caba8e4b002d20bd881ca20c32

    • SHA1

      e3eda16eee59623c9af0a1bf3fb117673300c665

    • SHA256

      9499ac5ede949c1a10148592b7d3af2aac1dd1550d5afd50969de7fb44293af7

    • SHA512

      10e7127d8c7a5ff42d7f2f5f6aa29c0d66c984b3a8e976ab1c0e924b4eada252f101e8d450e5e1d1386638089000953aa57e2e86b4c721159ef54c3a784f5f34

    • SSDEEP

      6144:pRkn+alqMqDoV0L29KQWFte1RfUuSDe+ArH:pRg+allJ0LcKNyR3SM

MITRE ATT&CK Enterprise v15

Tasks