General

  • Target

    JaffaCakes118_e4932f86a9a25846ad58199b2105dbfd

  • Size

    304KB

  • Sample

    250211-knqjja1qby

  • MD5

    e4932f86a9a25846ad58199b2105dbfd

  • SHA1

    b49b6f8df004d53ad000cfd09ade3545f27815f8

  • SHA256

    19b330609f798c798ccac832c0ff6738985f36d0784643f109f6545dd763e7c6

  • SHA512

    0903f8209db958925948cc1bd27e39ed57f17e7e5e15556d91b8a9397601cf48b53b71e1b317efc7e86067e3da9646b5bf6a8d57763fd7e1e2895206fb299038

  • SSDEEP

    6144:KzCBfyLHF+MBAoeoTn3RQ+IdiIfVr0LLwN/pJd3Hd/v1jQ5ICsP:ZBfKHdu5oTnOdffVgwnJFdls5RS

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e4932f86a9a25846ad58199b2105dbfd

    • Size

      304KB

    • MD5

      e4932f86a9a25846ad58199b2105dbfd

    • SHA1

      b49b6f8df004d53ad000cfd09ade3545f27815f8

    • SHA256

      19b330609f798c798ccac832c0ff6738985f36d0784643f109f6545dd763e7c6

    • SHA512

      0903f8209db958925948cc1bd27e39ed57f17e7e5e15556d91b8a9397601cf48b53b71e1b317efc7e86067e3da9646b5bf6a8d57763fd7e1e2895206fb299038

    • SSDEEP

      6144:KzCBfyLHF+MBAoeoTn3RQ+IdiIfVr0LLwN/pJd3Hd/v1jQ5ICsP:ZBfKHdu5oTnOdffVgwnJFdls5RS

MITRE ATT&CK Enterprise v15

Tasks