General

  • Target

    JaffaCakes118_f96694354c6aa434176aca2d23f34223

  • Size

    201KB

  • Sample

    250214-s1aylssqbs

  • MD5

    f96694354c6aa434176aca2d23f34223

  • SHA1

    1d1138d1a4297265d0c6f6a38f8a99741df82790

  • SHA256

    9aeed60e538ebe7b381b99e17053115601c9747f2d058b364515461cecf175ee

  • SHA512

    815426f657eb8f92665009401f2a01663cf72bdbed1e87114487ccb519a8e92df26a53d9ee985c489a022742fc7684a5f183cd7e8561bb98c8813eec0f6ef3fb

  • SSDEEP

    6144:JoGHohfBO/EjvZX+FLwCrRrYSRnWXAojbq:XIhpO/EjhX+frRrRnE9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_f96694354c6aa434176aca2d23f34223

    • Size

      201KB

    • MD5

      f96694354c6aa434176aca2d23f34223

    • SHA1

      1d1138d1a4297265d0c6f6a38f8a99741df82790

    • SHA256

      9aeed60e538ebe7b381b99e17053115601c9747f2d058b364515461cecf175ee

    • SHA512

      815426f657eb8f92665009401f2a01663cf72bdbed1e87114487ccb519a8e92df26a53d9ee985c489a022742fc7684a5f183cd7e8561bb98c8813eec0f6ef3fb

    • SSDEEP

      6144:JoGHohfBO/EjvZX+FLwCrRrYSRnWXAojbq:XIhpO/EjhX+frRrRnE9

MITRE ATT&CK Enterprise v15

Tasks