General

  • Target

    JaffaCakes118_f5010c7b2f66723ec5995ff0a53d2838

  • Size

    283KB

  • Sample

    250214-h2rbwawphk

  • MD5

    f5010c7b2f66723ec5995ff0a53d2838

  • SHA1

    dfb6c2c41203abfa98097752b5b46fcadec19fc6

  • SHA256

    66a0a14637174d13e1d1a61abc6204b9d918c25b41db5930ae7965437d6b8358

  • SHA512

    e7acc8beac5f06f882408e46e4e7a5b098f8091f6385d4ea463899db4b21bcb3c55b0c941d1ad0465aa008608500e8bb88a460cae90a5314ba212f7db598643b

  • SSDEEP

    6144:KAR2yMc7Aogde44yCfoEyah2u1ZarBqBtgcmnhHQ48nAUNDt:LL+3XFCfn18BytgcWhHyrR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f5010c7b2f66723ec5995ff0a53d2838

    • Size

      283KB

    • MD5

      f5010c7b2f66723ec5995ff0a53d2838

    • SHA1

      dfb6c2c41203abfa98097752b5b46fcadec19fc6

    • SHA256

      66a0a14637174d13e1d1a61abc6204b9d918c25b41db5930ae7965437d6b8358

    • SHA512

      e7acc8beac5f06f882408e46e4e7a5b098f8091f6385d4ea463899db4b21bcb3c55b0c941d1ad0465aa008608500e8bb88a460cae90a5314ba212f7db598643b

    • SSDEEP

      6144:KAR2yMc7Aogde44yCfoEyah2u1ZarBqBtgcmnhHQ48nAUNDt:LL+3XFCfn18BytgcWhHyrR

MITRE ATT&CK Enterprise v15

Tasks