General

  • Target

    JaffaCakes118_e2f3aa983b079f2a90835c5bac2b8fff

  • Size

    250KB

  • Sample

    250211-fzd8esxqfs

  • MD5

    e2f3aa983b079f2a90835c5bac2b8fff

  • SHA1

    1f25c0f51f2fe72d376d8b1e2eca56d067396d40

  • SHA256

    f498ffaa1b2a9906a724f6340b0c9c4bfb853980d5de84efe742a9b51ac0186b

  • SHA512

    440845dc3948e94818ed2fbb449664d9c724e8787da16c7cc8588e6643bbe2137802bad71f6428e841546d780202f8d9180e202fbbe5fb088cef2fc736676b39

  • SSDEEP

    6144:8oWommoLqu8ccQH07Y+dZ7Ir77sDD6o70Pr7dTfoUh1OzM:8oWoWBEXY+MsDpGfFjOzM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e2f3aa983b079f2a90835c5bac2b8fff

    • Size

      250KB

    • MD5

      e2f3aa983b079f2a90835c5bac2b8fff

    • SHA1

      1f25c0f51f2fe72d376d8b1e2eca56d067396d40

    • SHA256

      f498ffaa1b2a9906a724f6340b0c9c4bfb853980d5de84efe742a9b51ac0186b

    • SHA512

      440845dc3948e94818ed2fbb449664d9c724e8787da16c7cc8588e6643bbe2137802bad71f6428e841546d780202f8d9180e202fbbe5fb088cef2fc736676b39

    • SSDEEP

      6144:8oWommoLqu8ccQH07Y+dZ7Ir77sDD6o70Pr7dTfoUh1OzM:8oWoWBEXY+MsDpGfFjOzM

MITRE ATT&CK Enterprise v15

Tasks