General

  • Target

    JaffaCakes118_ecf6b53b1639341886a94d3ee73a505c

  • Size

    257KB

  • Sample

    250212-entnasylfr

  • MD5

    ecf6b53b1639341886a94d3ee73a505c

  • SHA1

    4911ace7d401472b7a7fabbd18b56d2b84390a08

  • SHA256

    245b8f87f02804f90621225ed5d52e820580bf642893dca6ea30ccc96a9aade1

  • SHA512

    b59e63c1a1a21c5731089bf2d20f044cc7609ad0614b17b9ecd4ccbd3c70da61260dfc68e39a4b81c342bc8f0b5efaa30746d6c6564faa913e701220ea095cef

  • SSDEEP

    3072:xicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:gXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ecf6b53b1639341886a94d3ee73a505c

    • Size

      257KB

    • MD5

      ecf6b53b1639341886a94d3ee73a505c

    • SHA1

      4911ace7d401472b7a7fabbd18b56d2b84390a08

    • SHA256

      245b8f87f02804f90621225ed5d52e820580bf642893dca6ea30ccc96a9aade1

    • SHA512

      b59e63c1a1a21c5731089bf2d20f044cc7609ad0614b17b9ecd4ccbd3c70da61260dfc68e39a4b81c342bc8f0b5efaa30746d6c6564faa913e701220ea095cef

    • SSDEEP

      3072:xicFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:gXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks