General

  • Target

    JaffaCakes118_f43fd1c9c82ca11550393cba7a7a1a62

  • Size

    257KB

  • Sample

    250214-gjx62avjap

  • MD5

    f43fd1c9c82ca11550393cba7a7a1a62

  • SHA1

    06341fe606a49fdec140ce17fcfb7025e2b6344d

  • SHA256

    25a53ca65d961a20459f9246f7e0cbf51fd5dfaa545b83be530eb45d038ab084

  • SHA512

    96d24875af0caeecc918a0d38740e8e4a6c1a2c41126030f9a5ef6c81c8319d24aff97458089d76e6cda17c7bbb153b8f5472d5e3a85d9ea5280433ec4dd7665

  • SSDEEP

    3072:+icFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:LXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f43fd1c9c82ca11550393cba7a7a1a62

    • Size

      257KB

    • MD5

      f43fd1c9c82ca11550393cba7a7a1a62

    • SHA1

      06341fe606a49fdec140ce17fcfb7025e2b6344d

    • SHA256

      25a53ca65d961a20459f9246f7e0cbf51fd5dfaa545b83be530eb45d038ab084

    • SHA512

      96d24875af0caeecc918a0d38740e8e4a6c1a2c41126030f9a5ef6c81c8319d24aff97458089d76e6cda17c7bbb153b8f5472d5e3a85d9ea5280433ec4dd7665

    • SSDEEP

      3072:+icFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:LXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks