General

  • Target

    JaffaCakes118_dec91a7991bdda5698758ee63d5456d9

  • Size

    275KB

  • Sample

    250210-x591qatmbr

  • MD5

    dec91a7991bdda5698758ee63d5456d9

  • SHA1

    0294f4b3020667ad4d2f651aa9fdea42a4a2cd30

  • SHA256

    f6d811b1a6f41232846d4900bfdc7323eae358c523bf1dd39a5e15cb3ba4ffd5

  • SHA512

    f57f27eb689efad9e51b83534f7e834b2ad2b2d91d47820b50fe11443d3ed90f2f3518e6a7965fb6966be144f852e1577a3d16cd47a8f8cf1c3b5d66a0507099

  • SSDEEP

    3072:BlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:9Yi9rkjWJduqyFKrzDTaQ2KlGiX76j

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_dec91a7991bdda5698758ee63d5456d9

    • Size

      275KB

    • MD5

      dec91a7991bdda5698758ee63d5456d9

    • SHA1

      0294f4b3020667ad4d2f651aa9fdea42a4a2cd30

    • SHA256

      f6d811b1a6f41232846d4900bfdc7323eae358c523bf1dd39a5e15cb3ba4ffd5

    • SHA512

      f57f27eb689efad9e51b83534f7e834b2ad2b2d91d47820b50fe11443d3ed90f2f3518e6a7965fb6966be144f852e1577a3d16cd47a8f8cf1c3b5d66a0507099

    • SSDEEP

      3072:BlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:9Yi9rkjWJduqyFKrzDTaQ2KlGiX76j

MITRE ATT&CK Enterprise v15

Tasks