General

  • Target

    JaffaCakes118_d75d009dc45dc035ede07ca9be932139

  • Size

    285KB

  • Sample

    250210-fb5eps1kfp

  • MD5

    d75d009dc45dc035ede07ca9be932139

  • SHA1

    5926ff7e06eb5fad3f047f2dee34d1161a9b5984

  • SHA256

    bd1ce8b24efff4cf70e92ad5f8c7e96ded52828965ddfe2a5deeba98b6ec3433

  • SHA512

    81e4e0e0c6eb4680e594c792de066ca09ee5c0da840d25fb68ef07782a96d0126be3c691cc2231957b93a8e552dee99e0da10b3bcee5a2b4a0bf617a6e2fb193

  • SSDEEP

    6144:rxwObdz6f8c1cXSBtglk34O2ZOt3bmGIlpuAl4+V07n6+JmGJLz:lwObdQ8EcCglk34O2UmGguACK07VmGJL

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d75d009dc45dc035ede07ca9be932139

    • Size

      285KB

    • MD5

      d75d009dc45dc035ede07ca9be932139

    • SHA1

      5926ff7e06eb5fad3f047f2dee34d1161a9b5984

    • SHA256

      bd1ce8b24efff4cf70e92ad5f8c7e96ded52828965ddfe2a5deeba98b6ec3433

    • SHA512

      81e4e0e0c6eb4680e594c792de066ca09ee5c0da840d25fb68ef07782a96d0126be3c691cc2231957b93a8e552dee99e0da10b3bcee5a2b4a0bf617a6e2fb193

    • SSDEEP

      6144:rxwObdz6f8c1cXSBtglk34O2ZOt3bmGIlpuAl4+V07n6+JmGJLz:lwObdQ8EcCglk34O2UmGguACK07VmGJL

MITRE ATT&CK Enterprise v15

Tasks