General

  • Target

    JaffaCakes118_eb5dd35d3a20b8583422c842eb5905c9

  • Size

    282KB

  • Sample

    250212-adcvksvpcw

  • MD5

    eb5dd35d3a20b8583422c842eb5905c9

  • SHA1

    233005413c9085c9ff5185d722ce7cd406d5d147

  • SHA256

    c2d2ea256db2569a51fb13a976a0390ffc3f387b630a53e2111952655f61b38d

  • SHA512

    93dc544f422429fb067151c9034d154d557e80574e753adaedf2bf66ff1b3a81ea1a2d6dc814efaad6dcdcb04332d44f8f4e01b352aeab53c7b0750941348a13

  • SSDEEP

    6144:AZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:sFTxWYMh5qoLb8LCy9E

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_eb5dd35d3a20b8583422c842eb5905c9

    • Size

      282KB

    • MD5

      eb5dd35d3a20b8583422c842eb5905c9

    • SHA1

      233005413c9085c9ff5185d722ce7cd406d5d147

    • SHA256

      c2d2ea256db2569a51fb13a976a0390ffc3f387b630a53e2111952655f61b38d

    • SHA512

      93dc544f422429fb067151c9034d154d557e80574e753adaedf2bf66ff1b3a81ea1a2d6dc814efaad6dcdcb04332d44f8f4e01b352aeab53c7b0750941348a13

    • SSDEEP

      6144:AZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:sFTxWYMh5qoLb8LCy9E

    • Modifies WinLogon for persistence

    • Simda family

    • simda

      Simda is an infostealer written in C++.

    • Downloads MZ/PE file

    • Adds Run key to start application

    • Modifies WinLogon

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks