General

  • Target

    JaffaCakes118_e7cf2c62d1fcb85e06c3904f2ab327d4

  • Size

    287KB

  • Sample

    250211-s5l7fazmej

  • MD5

    e7cf2c62d1fcb85e06c3904f2ab327d4

  • SHA1

    20944c48b3ca4c3622d38afc1a4911e4e932cd41

  • SHA256

    a4265c6e6d91023bcaae9ac019f3e3e1d33ae5e788bfa02c1ff99ffbc760d951

  • SHA512

    3d97f46963bbde03641b230c331b65c5b039b4f63feeed7d4eeb767c5b383b08ed5b82905dcd1ffae463c90ffc1bd7dea4727eccb09779aa631396f3dab0c12c

  • SSDEEP

    6144:N84R+/nBQojUb4LoaXqMKVjNY4GuKcxwMwulQMEAj+:ShBQ6n/SVqxcxwDunE3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e7cf2c62d1fcb85e06c3904f2ab327d4

    • Size

      287KB

    • MD5

      e7cf2c62d1fcb85e06c3904f2ab327d4

    • SHA1

      20944c48b3ca4c3622d38afc1a4911e4e932cd41

    • SHA256

      a4265c6e6d91023bcaae9ac019f3e3e1d33ae5e788bfa02c1ff99ffbc760d951

    • SHA512

      3d97f46963bbde03641b230c331b65c5b039b4f63feeed7d4eeb767c5b383b08ed5b82905dcd1ffae463c90ffc1bd7dea4727eccb09779aa631396f3dab0c12c

    • SSDEEP

      6144:N84R+/nBQojUb4LoaXqMKVjNY4GuKcxwMwulQMEAj+:ShBQ6n/SVqxcxwDunE3

MITRE ATT&CK Enterprise v15

Tasks