General

  • Target

    JaffaCakes118_e2a8e079d2ba03318697a0cf8ab3af42

  • Size

    248KB

  • Sample

    250211-e8ysraxkan

  • MD5

    e2a8e079d2ba03318697a0cf8ab3af42

  • SHA1

    d5b3394de558a51da01da36b3c7176cd5b048ed4

  • SHA256

    1029dce31f20ebdb6f1fd0988a15451070397e87b51557e22ad5c95da6da7f04

  • SHA512

    fa672b058fd1b6e0c0ecd6ca8a190411a32d1ad388e0baf8846343652e9c39b38027b35447b49333ec201de673a24091b7f0fd7c710e010408b578356dacfe66

  • SSDEEP

    6144:zMH0KQeItf7P69wgHOCrBnemJB1iZXHl5rink+BO4Gcu8iVv:zMgvtf7P69weO8nrncpinksNiVv

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_e2a8e079d2ba03318697a0cf8ab3af42

    • Size

      248KB

    • MD5

      e2a8e079d2ba03318697a0cf8ab3af42

    • SHA1

      d5b3394de558a51da01da36b3c7176cd5b048ed4

    • SHA256

      1029dce31f20ebdb6f1fd0988a15451070397e87b51557e22ad5c95da6da7f04

    • SHA512

      fa672b058fd1b6e0c0ecd6ca8a190411a32d1ad388e0baf8846343652e9c39b38027b35447b49333ec201de673a24091b7f0fd7c710e010408b578356dacfe66

    • SSDEEP

      6144:zMH0KQeItf7P69wgHOCrBnemJB1iZXHl5rink+BO4Gcu8iVv:zMgvtf7P69weO8nrncpinksNiVv

MITRE ATT&CK Enterprise v15

Tasks