General

  • Target

    JaffaCakes118_d80cfd2a3978346427e2aa5c1e14ec94

  • Size

    243KB

  • Sample

    250210-gpqzxatjaz

  • MD5

    d80cfd2a3978346427e2aa5c1e14ec94

  • SHA1

    74e894a33aef71e22371735c7854ab700285542b

  • SHA256

    705a2c7e3bd4b076f1d0470c7d97aae11a3fec71c4a2996ab0d8a76b46d18a22

  • SHA512

    7b731bba8d1400bb47575c78b6c33831222bafde6a6632328bd5a05583b87f18bce7895c27050c259a580f378f4d914e2fe88a6e4a126e714b19d3fb2b4201d8

  • SSDEEP

    6144:fnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:BTKCS2sjWC1rfd/Rtqc7HqkYh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_d80cfd2a3978346427e2aa5c1e14ec94

    • Size

      243KB

    • MD5

      d80cfd2a3978346427e2aa5c1e14ec94

    • SHA1

      74e894a33aef71e22371735c7854ab700285542b

    • SHA256

      705a2c7e3bd4b076f1d0470c7d97aae11a3fec71c4a2996ab0d8a76b46d18a22

    • SHA512

      7b731bba8d1400bb47575c78b6c33831222bafde6a6632328bd5a05583b87f18bce7895c27050c259a580f378f4d914e2fe88a6e4a126e714b19d3fb2b4201d8

    • SSDEEP

      6144:fnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:BTKCS2sjWC1rfd/Rtqc7HqkYh

MITRE ATT&CK Enterprise v15

Tasks