General

  • Target

    JaffaCakes118_f9b3264ecbd6959066b61505b6538f93

  • Size

    266KB

  • Sample

    250214-trpk3stpcs

  • MD5

    f9b3264ecbd6959066b61505b6538f93

  • SHA1

    75ac66b305c499561d9c5c0880b2582a163f5fcf

  • SHA256

    1022e2aad73289b4ac92b1394d12e404a9310c0bea95a6764291205d5d5445d1

  • SHA512

    5f80e474c4a5a962c5aef1fcf8437c1dc1ceb905fe30927d81227b0c1315a6144d08d6e2f181a7f50e7ba9439b8a19837198bf876db02540ff3959b8f2e58e89

  • SSDEEP

    3072:VW/1lqNqAoPJl+Q7fFOPLfie9rHbK5pWsl8bnDZNnZRfs6pCWtKU7xTVKpfo5Utn:4rDPSgFCqiXIQ28bDr5trKpfo5aoo

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_f9b3264ecbd6959066b61505b6538f93

    • Size

      266KB

    • MD5

      f9b3264ecbd6959066b61505b6538f93

    • SHA1

      75ac66b305c499561d9c5c0880b2582a163f5fcf

    • SHA256

      1022e2aad73289b4ac92b1394d12e404a9310c0bea95a6764291205d5d5445d1

    • SHA512

      5f80e474c4a5a962c5aef1fcf8437c1dc1ceb905fe30927d81227b0c1315a6144d08d6e2f181a7f50e7ba9439b8a19837198bf876db02540ff3959b8f2e58e89

    • SSDEEP

      3072:VW/1lqNqAoPJl+Q7fFOPLfie9rHbK5pWsl8bnDZNnZRfs6pCWtKU7xTVKpfo5Utn:4rDPSgFCqiXIQ28bDr5trKpfo5aoo

MITRE ATT&CK Enterprise v15

Tasks