General

  • Target

    JaffaCakes118_f369e2b206cc5aa912f8d974de550f0c

  • Size

    250KB

  • Sample

    250214-es2vgasmbv

  • MD5

    f369e2b206cc5aa912f8d974de550f0c

  • SHA1

    d880de066032a5f55cbf7117061b0eb1ee7313ce

  • SHA256

    9396a351c473866b0baf4482c4eb233b3c0e5ce9ebc4e6a00e9e38ed362096b2

  • SHA512

    2ae45bb5b99500a7105599cff03d9837675599af1b3c9896b5138261f7b72b9059ba1f648f4377e09d39a100dab740a4d85d5b48d4285fd2531855c1b8d9175d

  • SSDEEP

    6144:/oWommoLqu8ccQH07Y+dZ7Ir77sDD6o70Pr7dTfoUh1OzM:/oWoWBEXY+MsDpGfFjOzM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f369e2b206cc5aa912f8d974de550f0c

    • Size

      250KB

    • MD5

      f369e2b206cc5aa912f8d974de550f0c

    • SHA1

      d880de066032a5f55cbf7117061b0eb1ee7313ce

    • SHA256

      9396a351c473866b0baf4482c4eb233b3c0e5ce9ebc4e6a00e9e38ed362096b2

    • SHA512

      2ae45bb5b99500a7105599cff03d9837675599af1b3c9896b5138261f7b72b9059ba1f648f4377e09d39a100dab740a4d85d5b48d4285fd2531855c1b8d9175d

    • SSDEEP

      6144:/oWommoLqu8ccQH07Y+dZ7Ir77sDD6o70Pr7dTfoUh1OzM:/oWoWBEXY+MsDpGfFjOzM

MITRE ATT&CK Enterprise v15

Tasks