General

  • Target

    JaffaCakes118_f6e2c387b767d767ad65119fa9b385ad

  • Size

    282KB

  • Sample

    250214-mqh9catmcx

  • MD5

    f6e2c387b767d767ad65119fa9b385ad

  • SHA1

    fe47aedfe3931c22f597dcb5a3a88bbc08ffbe02

  • SHA256

    a3b6b280c2ddde7233ccd83b619e19148ee611b86f8ebcc2c67cfe0da460f192

  • SHA512

    d7735bc0320a4b18410441233b87b734710f267482fbb163b014c684433d8383d38322504e4ea53cd20621bab72601dc8e8b478f2254b5dc6c37ad952006e7f1

  • SSDEEP

    6144:mZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:qFTxWYMh5qoLb8LCy9E

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f6e2c387b767d767ad65119fa9b385ad

    • Size

      282KB

    • MD5

      f6e2c387b767d767ad65119fa9b385ad

    • SHA1

      fe47aedfe3931c22f597dcb5a3a88bbc08ffbe02

    • SHA256

      a3b6b280c2ddde7233ccd83b619e19148ee611b86f8ebcc2c67cfe0da460f192

    • SHA512

      d7735bc0320a4b18410441233b87b734710f267482fbb163b014c684433d8383d38322504e4ea53cd20621bab72601dc8e8b478f2254b5dc6c37ad952006e7f1

    • SSDEEP

      6144:mZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:qFTxWYMh5qoLb8LCy9E

    • Modifies WinLogon for persistence

    • Simda family

    • simda

      Simda is an infostealer written in C++.

    • Downloads MZ/PE file

    • Adds Run key to start application

    • Modifies WinLogon

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks