General

  • Target

    JaffaCakes118_d7ac69d6f7e339552fc44df1a14059cb

  • Size

    260KB

  • Sample

    250210-fytays1pck

  • MD5

    d7ac69d6f7e339552fc44df1a14059cb

  • SHA1

    0fd2d7c9ae4a0bed3f4db1f140c73b5e89f2c084

  • SHA256

    62191722c92a43a6ecca4b3706ac784a573a8bc52793df26ec3d5421db4d81b9

  • SHA512

    8c1eedd5240b6ea569725ab799fa18eaa7c4377f257fc82c507c84f6b1618fb5e6e75f1ec5661356ad9fd8dcbf43fcdc039c8f93859da65bb0507b0a647f41a9

  • SSDEEP

    6144:NAPTOCuq51JsmiQFF0kJNOlsh2IiobuUnGsf8AD:NoB7BsHQz8JmG0D

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d7ac69d6f7e339552fc44df1a14059cb

    • Size

      260KB

    • MD5

      d7ac69d6f7e339552fc44df1a14059cb

    • SHA1

      0fd2d7c9ae4a0bed3f4db1f140c73b5e89f2c084

    • SHA256

      62191722c92a43a6ecca4b3706ac784a573a8bc52793df26ec3d5421db4d81b9

    • SHA512

      8c1eedd5240b6ea569725ab799fa18eaa7c4377f257fc82c507c84f6b1618fb5e6e75f1ec5661356ad9fd8dcbf43fcdc039c8f93859da65bb0507b0a647f41a9

    • SSDEEP

      6144:NAPTOCuq51JsmiQFF0kJNOlsh2IiobuUnGsf8AD:NoB7BsHQz8JmG0D

MITRE ATT&CK Enterprise v15

Tasks