General

  • Target

    JaffaCakes118_e8e8a2945b06ab4768df505d7dbae80d

  • Size

    275KB

  • Sample

    250211-wnkh3avqbz

  • MD5

    e8e8a2945b06ab4768df505d7dbae80d

  • SHA1

    d93c1cebf7030b5a0169fb2256bcb7f0dba70b0d

  • SHA256

    64445746af4a23b775a980a19a67d65e47ae18d30ce512b7171f57ac6e0d0111

  • SHA512

    3366cc03bcec5efab437f2a42fd97913ae7d3dcd40a17333c491de78f33a78cc3430e67662d2bcdceae3465dd6dcf1f768b265a77c9a97c9d2392a5903c8ac46

  • SSDEEP

    3072:jlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:zYi9rkjWJduqyFKrzDTaQ2KlGiX76j

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_e8e8a2945b06ab4768df505d7dbae80d

    • Size

      275KB

    • MD5

      e8e8a2945b06ab4768df505d7dbae80d

    • SHA1

      d93c1cebf7030b5a0169fb2256bcb7f0dba70b0d

    • SHA256

      64445746af4a23b775a980a19a67d65e47ae18d30ce512b7171f57ac6e0d0111

    • SHA512

      3366cc03bcec5efab437f2a42fd97913ae7d3dcd40a17333c491de78f33a78cc3430e67662d2bcdceae3465dd6dcf1f768b265a77c9a97c9d2392a5903c8ac46

    • SSDEEP

      3072:jlnVltjYHSdUH/krZSjz61lSAlXer8u4V4FrdXVx2rnzDTaSuFXM2MblGi9F6e7E:zYi9rkjWJduqyFKrzDTaQ2KlGiX76j

MITRE ATT&CK Enterprise v15

Tasks