General

  • Target

    JaffaCakes118_ea40a10bf93bd8d2c6694b7c4e4f9456

  • Size

    255KB

  • Sample

    250211-zvs1kazmbk

  • MD5

    ea40a10bf93bd8d2c6694b7c4e4f9456

  • SHA1

    64fd10d93d4fa8c616658d6fc05aa4194eddb83f

  • SHA256

    790c3921bf468c873fdb4c552461781173aa283132c26162c7aaa812713d66e4

  • SHA512

    f5e43c30c5d84e0874e361e8fcd7d110a1b904d8a0a527bfe29b250fa6e1c7a7508dc32e557387c8e58a493178a53f925d4064a8e881d5fe381fc5898b68fb90

  • SSDEEP

    6144:UNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:UNRdpgdRRoTCD4ijpoix

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ea40a10bf93bd8d2c6694b7c4e4f9456

    • Size

      255KB

    • MD5

      ea40a10bf93bd8d2c6694b7c4e4f9456

    • SHA1

      64fd10d93d4fa8c616658d6fc05aa4194eddb83f

    • SHA256

      790c3921bf468c873fdb4c552461781173aa283132c26162c7aaa812713d66e4

    • SHA512

      f5e43c30c5d84e0874e361e8fcd7d110a1b904d8a0a527bfe29b250fa6e1c7a7508dc32e557387c8e58a493178a53f925d4064a8e881d5fe381fc5898b68fb90

    • SSDEEP

      6144:UNU2+2kcTBWUZxjCld3hRV2QsXSAaj4ijpFaQTQisa:UNRdpgdRRoTCD4ijpoix

MITRE ATT&CK Enterprise v15

Tasks