General

  • Target

    JaffaCakes118_e12b5690d9c6b4367e261b9ccbda35a6

  • Size

    263KB

  • Sample

    250211-bk1qnatmgm

  • MD5

    e12b5690d9c6b4367e261b9ccbda35a6

  • SHA1

    3d7bac3ed774b68f01e2ee6400628ec8848b81c7

  • SHA256

    e66d425a66545a9febb5f87fd71be87741ff0d36a20e8e933ea217e818e8e121

  • SHA512

    5f7c3742b212181e622ece70d7a8f9ecdcffc31aaf61b4c0570ef830d0d1c3f661ae00da4a29632406a260b4825a92ce90fa971742c7767d2263f3bd097e5359

  • SSDEEP

    6144:s/gIBjsg+6svLS0NYo2KDlZ9MnHnjnXZu0FQ44:s/hsg+6sve0WUv9MnHnLXw0iP

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e12b5690d9c6b4367e261b9ccbda35a6

    • Size

      263KB

    • MD5

      e12b5690d9c6b4367e261b9ccbda35a6

    • SHA1

      3d7bac3ed774b68f01e2ee6400628ec8848b81c7

    • SHA256

      e66d425a66545a9febb5f87fd71be87741ff0d36a20e8e933ea217e818e8e121

    • SHA512

      5f7c3742b212181e622ece70d7a8f9ecdcffc31aaf61b4c0570ef830d0d1c3f661ae00da4a29632406a260b4825a92ce90fa971742c7767d2263f3bd097e5359

    • SSDEEP

      6144:s/gIBjsg+6svLS0NYo2KDlZ9MnHnjnXZu0FQ44:s/hsg+6sve0WUv9MnHnLXw0iP

MITRE ATT&CK Enterprise v15

Tasks