General

  • Target

    JaffaCakes118_d648eda9791fb495743e2c2ec2db6193

  • Size

    294KB

  • Sample

    250210-c1sknayndp

  • MD5

    d648eda9791fb495743e2c2ec2db6193

  • SHA1

    6c7f83f6ffdcefdc4253a0b122fa802bdbb542ff

  • SHA256

    f8cbe175d1f96edaf07e641e039b445d75e769e5a2a39940b41e1c12b9e5924f

  • SHA512

    860bd3e6bf5c447dd1ee2417ae2a9021b78590b0212c828cccf4964edbffd2566bb00b5f64ead7f821e95b8a66a3773c5ba83b2e3ee85024ef527f03d8257298

  • SSDEEP

    6144:2aBWzLg2TGJBi3b9wMZ5RNnZghf9YF4esb5qDjaBSRMDAT3:/K4Bw++DGhfSFXswa8CDAb

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d648eda9791fb495743e2c2ec2db6193

    • Size

      294KB

    • MD5

      d648eda9791fb495743e2c2ec2db6193

    • SHA1

      6c7f83f6ffdcefdc4253a0b122fa802bdbb542ff

    • SHA256

      f8cbe175d1f96edaf07e641e039b445d75e769e5a2a39940b41e1c12b9e5924f

    • SHA512

      860bd3e6bf5c447dd1ee2417ae2a9021b78590b0212c828cccf4964edbffd2566bb00b5f64ead7f821e95b8a66a3773c5ba83b2e3ee85024ef527f03d8257298

    • SSDEEP

      6144:2aBWzLg2TGJBi3b9wMZ5RNnZghf9YF4esb5qDjaBSRMDAT3:/K4Bw++DGhfSFXswa8CDAb

MITRE ATT&CK Enterprise v15

Tasks