General

  • Target

    JaffaCakes118_ddca1a0e8e9f50a99974493af1e5ea25

  • Size

    262KB

  • Sample

    250210-vx5pxszngw

  • MD5

    ddca1a0e8e9f50a99974493af1e5ea25

  • SHA1

    16ccba6c8bd0d5f5bee66ad1e8eb28f24ae32be0

  • SHA256

    585d20270e10f2b418126b7729849243bbad27d56e9846496f0f723a1a8af03f

  • SHA512

    b541759989c80d9fce00cfece55abda15ccc1805ba8c576fb49ea9775f9ff6837d68fbdeebdf353a14b269939d92d296cf8f393f765ac620c971696178dd79a5

  • SSDEEP

    3072:n8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:AWQ6HWLs+Eum1RNrkCqddcGRW4P

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ddca1a0e8e9f50a99974493af1e5ea25

    • Size

      262KB

    • MD5

      ddca1a0e8e9f50a99974493af1e5ea25

    • SHA1

      16ccba6c8bd0d5f5bee66ad1e8eb28f24ae32be0

    • SHA256

      585d20270e10f2b418126b7729849243bbad27d56e9846496f0f723a1a8af03f

    • SHA512

      b541759989c80d9fce00cfece55abda15ccc1805ba8c576fb49ea9775f9ff6837d68fbdeebdf353a14b269939d92d296cf8f393f765ac620c971696178dd79a5

    • SSDEEP

      3072:n8nW6fb/CH1pGLP7c7pJ1GE7am88d5Bt9pTlNg8pPD4Cqykp/v35aYV1kOOkSCWc:AWQ6HWLs+Eum1RNrkCqddcGRW4P

MITRE ATT&CK Enterprise v15

Tasks