General

  • Target

    JaffaCakes118_d59f9bafa85cd8431d8531c10604030f

  • Size

    282KB

  • Sample

    250210-bhn9vayjgw

  • MD5

    d59f9bafa85cd8431d8531c10604030f

  • SHA1

    0f12ff7deea074813a7909d107652d0a1488f31f

  • SHA256

    c9d849ee764146a14648470d862510171b51662d9639beec91397bf16029acb8

  • SHA512

    4f3abd8c51eeea4b880c2b2c7da619c8a89b33aed888289a44edd1c8a5a6b713d53c7aa3b0c1750df5e4dbc72559cccc896933b86168bf7aeab9483664775b6b

  • SSDEEP

    6144:gZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:MFTxWYMh5qoLb8LCy9E

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d59f9bafa85cd8431d8531c10604030f

    • Size

      282KB

    • MD5

      d59f9bafa85cd8431d8531c10604030f

    • SHA1

      0f12ff7deea074813a7909d107652d0a1488f31f

    • SHA256

      c9d849ee764146a14648470d862510171b51662d9639beec91397bf16029acb8

    • SHA512

      4f3abd8c51eeea4b880c2b2c7da619c8a89b33aed888289a44edd1c8a5a6b713d53c7aa3b0c1750df5e4dbc72559cccc896933b86168bf7aeab9483664775b6b

    • SSDEEP

      6144:gZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:MFTxWYMh5qoLb8LCy9E

    • Modifies WinLogon for persistence

    • Simda family

    • simda

      Simda is an infostealer written in C++.

    • Downloads MZ/PE file

    • Adds Run key to start application

    • Modifies WinLogon

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks