General

  • Target

    JaffaCakes118_e8484807050ea7531ab58840b8b60330

  • Size

    257KB

  • Sample

    250211-t6lgzasrcq

  • MD5

    e8484807050ea7531ab58840b8b60330

  • SHA1

    12d96ed1626d29f35ee108eaf64ec59d8c001fa2

  • SHA256

    b29a1321abf64c4aff50af79dee010fd2642a836611163e01f7e61c460163dd8

  • SHA512

    8cff5cbe3ca03cb8a114025247e40883cc9c4b52cdd7236a1713ad24c13340fd338937cb3137adc1ef3697f0f2562c7e0263fd71c972bd43edd993f1ac8a9b7c

  • SSDEEP

    6144:CZTlnN3HxAhazaSK4QM5HTPmOFGOGt/HqixmyYVgGo5n:AUM5LFfG5dfl

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e8484807050ea7531ab58840b8b60330

    • Size

      257KB

    • MD5

      e8484807050ea7531ab58840b8b60330

    • SHA1

      12d96ed1626d29f35ee108eaf64ec59d8c001fa2

    • SHA256

      b29a1321abf64c4aff50af79dee010fd2642a836611163e01f7e61c460163dd8

    • SHA512

      8cff5cbe3ca03cb8a114025247e40883cc9c4b52cdd7236a1713ad24c13340fd338937cb3137adc1ef3697f0f2562c7e0263fd71c972bd43edd993f1ac8a9b7c

    • SSDEEP

      6144:CZTlnN3HxAhazaSK4QM5HTPmOFGOGt/HqixmyYVgGo5n:AUM5LFfG5dfl

MITRE ATT&CK Enterprise v15

Tasks