General

  • Target

    JaffaCakes118_d367a6dd9fe2497013ffc627f75db568

  • Size

    280KB

  • Sample

    250209-zd8dxssjft

  • MD5

    d367a6dd9fe2497013ffc627f75db568

  • SHA1

    8f0c1740e870d7aca3e81f14aaeb1a176e9c25b6

  • SHA256

    639da3e7985863dcfa7d20a6b562c4d64418da728b44ed672dacce57bf80e67b

  • SHA512

    b70278a1476a8e057de05ff8ce2397397c1e65816025e023f5e3da68a236449e2cc7204dd3f32f098e11f4aa857c53d22f9edd161892116bfcb4a9db09efdc3d

  • SSDEEP

    6144:P/9cAjHYrKNY9Q2P20eKHNEi17H0KXsSRliL:eaSKNv2UqiHIsS7iL

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d367a6dd9fe2497013ffc627f75db568

    • Size

      280KB

    • MD5

      d367a6dd9fe2497013ffc627f75db568

    • SHA1

      8f0c1740e870d7aca3e81f14aaeb1a176e9c25b6

    • SHA256

      639da3e7985863dcfa7d20a6b562c4d64418da728b44ed672dacce57bf80e67b

    • SHA512

      b70278a1476a8e057de05ff8ce2397397c1e65816025e023f5e3da68a236449e2cc7204dd3f32f098e11f4aa857c53d22f9edd161892116bfcb4a9db09efdc3d

    • SSDEEP

      6144:P/9cAjHYrKNY9Q2P20eKHNEi17H0KXsSRliL:eaSKNv2UqiHIsS7iL

MITRE ATT&CK Enterprise v15

Tasks