General

  • Target

    JaffaCakes118_f373456980485dc3907b1dbd568fd08b

  • Size

    315KB

  • Sample

    250214-exhbmasnbz

  • MD5

    f373456980485dc3907b1dbd568fd08b

  • SHA1

    4df8fbf437337583a0c4ac0b38e541b9e2085a7f

  • SHA256

    6bea1f6533fd7283cfb2c21cf809277865d25919cb2454454ce52a67d9ae1637

  • SHA512

    a3ec8da74fb0b336df13d9c0dd3d60ee3789d8b9235be923f128eee2df0a9361444f036a970af6a21132e23b32ade2dfcb7a8eebfe387134821101ba1ecedbd1

  • SSDEEP

    6144:ghNwcXcmQKhe2rjin48pSNHPKBG/xZ+QbAqHqQPdY8gYFcXX2gP4dl/6:ghJXPnq+z1ZqQJgTXX2gAdlC

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f373456980485dc3907b1dbd568fd08b

    • Size

      315KB

    • MD5

      f373456980485dc3907b1dbd568fd08b

    • SHA1

      4df8fbf437337583a0c4ac0b38e541b9e2085a7f

    • SHA256

      6bea1f6533fd7283cfb2c21cf809277865d25919cb2454454ce52a67d9ae1637

    • SHA512

      a3ec8da74fb0b336df13d9c0dd3d60ee3789d8b9235be923f128eee2df0a9361444f036a970af6a21132e23b32ade2dfcb7a8eebfe387134821101ba1ecedbd1

    • SSDEEP

      6144:ghNwcXcmQKhe2rjin48pSNHPKBG/xZ+QbAqHqQPdY8gYFcXX2gP4dl/6:ghJXPnq+z1ZqQJgTXX2gAdlC

MITRE ATT&CK Enterprise v15

Tasks