General

  • Target

    JaffaCakes118_f90cf1f00c117a4af196c7f5ffa9e28d

  • Size

    254KB

  • Sample

    250214-r6h1qszrhl

  • MD5

    f90cf1f00c117a4af196c7f5ffa9e28d

  • SHA1

    57cf25d59dd7c95aafac60843fd997c9795a5996

  • SHA256

    3fb3def0e6972007c39f9aabeb807998cfed3ec14d4c53387c7817e08c0c5b52

  • SHA512

    85ba711cb95fa5188ca48e860977b0da9b51c2a32783a32d76150763ee097e0cd57001eeaa2bb1658c439a1a40b1b1e3d387fc99605df7c37a9e5f1878a6ebb4

  • SSDEEP

    3072://w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:nwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f90cf1f00c117a4af196c7f5ffa9e28d

    • Size

      254KB

    • MD5

      f90cf1f00c117a4af196c7f5ffa9e28d

    • SHA1

      57cf25d59dd7c95aafac60843fd997c9795a5996

    • SHA256

      3fb3def0e6972007c39f9aabeb807998cfed3ec14d4c53387c7817e08c0c5b52

    • SHA512

      85ba711cb95fa5188ca48e860977b0da9b51c2a32783a32d76150763ee097e0cd57001eeaa2bb1658c439a1a40b1b1e3d387fc99605df7c37a9e5f1878a6ebb4

    • SSDEEP

      3072://w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:nwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

MITRE ATT&CK Enterprise v15

Tasks