General

  • Target

    JaffaCakes118_d627a216e304a23c99bb40fb207517e7

  • Size

    309KB

  • Sample

    250210-cp6yxaylgr

  • MD5

    d627a216e304a23c99bb40fb207517e7

  • SHA1

    1b5faaa71e8d895a48a05d49bdbe017b99cdb8c6

  • SHA256

    72f4718a07be2723ccc0c6c6957bbe48667e5a9d8faf16cdb598bffcad174fde

  • SHA512

    68df65965d9372f6d1a2abd2d0f57dd6b6a50228549e1ae8c88e1d495d07131c3d973343e54daef074e337e9bf87ca5d9e5862e0b94fc20509309a572824f7d1

  • SSDEEP

    6144:CVPN7wQ8P9sUeNE69gMG01kr5cG3/fbYKzeNsxB7SWz:CVPy3FsU/fp01krf/zXeSf7Fz

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d627a216e304a23c99bb40fb207517e7

    • Size

      309KB

    • MD5

      d627a216e304a23c99bb40fb207517e7

    • SHA1

      1b5faaa71e8d895a48a05d49bdbe017b99cdb8c6

    • SHA256

      72f4718a07be2723ccc0c6c6957bbe48667e5a9d8faf16cdb598bffcad174fde

    • SHA512

      68df65965d9372f6d1a2abd2d0f57dd6b6a50228549e1ae8c88e1d495d07131c3d973343e54daef074e337e9bf87ca5d9e5862e0b94fc20509309a572824f7d1

    • SSDEEP

      6144:CVPN7wQ8P9sUeNE69gMG01kr5cG3/fbYKzeNsxB7SWz:CVPy3FsU/fp01krf/zXeSf7Fz

MITRE ATT&CK Enterprise v15

Tasks