General

  • Target

    JaffaCakes118_e3e509aefa9b983cae523d606fc056d4

  • Size

    257KB

  • Sample

    250211-h6pzlsznht

  • MD5

    e3e509aefa9b983cae523d606fc056d4

  • SHA1

    0007fb28de7c332021778afcbb47a58dc03a632e

  • SHA256

    6256fd1957346edf1a5c943648a33a99958b178d6e2df7acef785a3ac3d53f15

  • SHA512

    97c75683e4db8b0395d6020aea82269f37d060ecee6740abc3701b13b5e2bd5c9f5723dfb2f162ceb21f88031130728663542995ac72de7b318e79d263ea744b

  • SSDEEP

    6144:mSVEU35ie3z8WoHWNNROKRLjIQHLnlQ12+mCaiCrMNafWPFN:mU5iI8DHkYEfobfPFN

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e3e509aefa9b983cae523d606fc056d4

    • Size

      257KB

    • MD5

      e3e509aefa9b983cae523d606fc056d4

    • SHA1

      0007fb28de7c332021778afcbb47a58dc03a632e

    • SHA256

      6256fd1957346edf1a5c943648a33a99958b178d6e2df7acef785a3ac3d53f15

    • SHA512

      97c75683e4db8b0395d6020aea82269f37d060ecee6740abc3701b13b5e2bd5c9f5723dfb2f162ceb21f88031130728663542995ac72de7b318e79d263ea744b

    • SSDEEP

      6144:mSVEU35ie3z8WoHWNNROKRLjIQHLnlQ12+mCaiCrMNafWPFN:mU5iI8DHkYEfobfPFN

MITRE ATT&CK Enterprise v15

Tasks