General

  • Target

    JaffaCakes118_e39eb62bd0e2530eb02991e99ff47563

  • Size

    243KB

  • Sample

    250211-hj5fsazjfs

  • MD5

    e39eb62bd0e2530eb02991e99ff47563

  • SHA1

    937d266d0098aa876d72f12c2ca8c61d25083c5d

  • SHA256

    101121a55443d16748fa34c9a78ef4e29217da8bcc18495c0bc45a23ab7bc26e

  • SHA512

    c1a6c36f501b75151ff51c41623937874b26b09cec9d9e00d9cec2cde9749e3ee7f2fcc12210da292e3934ca695652dbd730c9710fe1454a17c5e91668a342d2

  • SSDEEP

    3072:JpUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:JpUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e39eb62bd0e2530eb02991e99ff47563

    • Size

      243KB

    • MD5

      e39eb62bd0e2530eb02991e99ff47563

    • SHA1

      937d266d0098aa876d72f12c2ca8c61d25083c5d

    • SHA256

      101121a55443d16748fa34c9a78ef4e29217da8bcc18495c0bc45a23ab7bc26e

    • SHA512

      c1a6c36f501b75151ff51c41623937874b26b09cec9d9e00d9cec2cde9749e3ee7f2fcc12210da292e3934ca695652dbd730c9710fe1454a17c5e91668a342d2

    • SSDEEP

      3072:JpUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:JpUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

MITRE ATT&CK Enterprise v15

Tasks