General

  • Target

    JaffaCakes118_d552cd4f9a8f1fc14ccc3cff3647a234

  • Size

    264KB

  • Sample

    250210-asrbhsxmhx

  • MD5

    d552cd4f9a8f1fc14ccc3cff3647a234

  • SHA1

    6d05a9e1d868b0f712b70ea62a3e12231b466774

  • SHA256

    b4767e2e84e2029b55dc3484acb69be0ed69d5bce34d2a2c6ee1b52ec548298e

  • SHA512

    20b683f8d882a5a014b4ec09b2e3f53f5e07f3e86924602b625579e107e85e38818cb1c178e7c77850311f56c434de6c48d28d5fac5d3161275a749e73c685cb

  • SSDEEP

    6144:FrlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:ZoZ8qpUwufw8T6XLNhcwHWntbbK

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d552cd4f9a8f1fc14ccc3cff3647a234

    • Size

      264KB

    • MD5

      d552cd4f9a8f1fc14ccc3cff3647a234

    • SHA1

      6d05a9e1d868b0f712b70ea62a3e12231b466774

    • SHA256

      b4767e2e84e2029b55dc3484acb69be0ed69d5bce34d2a2c6ee1b52ec548298e

    • SHA512

      20b683f8d882a5a014b4ec09b2e3f53f5e07f3e86924602b625579e107e85e38818cb1c178e7c77850311f56c434de6c48d28d5fac5d3161275a749e73c685cb

    • SSDEEP

      6144:FrlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:ZoZ8qpUwufw8T6XLNhcwHWntbbK

MITRE ATT&CK Enterprise v15

Tasks