General

  • Target

    JaffaCakes118_fae949f343130e9116c0b3a6cc744b45

  • Size

    250KB

  • Sample

    250215-v21a1avnaj

  • MD5

    fae949f343130e9116c0b3a6cc744b45

  • SHA1

    52f77fc502b799fb6ec93f74cf3fca36cae24cd4

  • SHA256

    d6f2c9d4726562c27080d3d8a276becc689f8453450e86707dd3a2f6a4cb8363

  • SHA512

    a80d46291af48e2d41ee019a88a8cc69a88694b59c2deab81e064ee368c729d9eac4fdd86f8576a6fa5a6460763e1014462641a9b8f354586af861b7b7eca67d

  • SSDEEP

    3072:b8uFqy/b9ztKLKwikmxoLU0/vTuOb7EXllXSLsCZCP6s8Z7OnZi2VCKude0W9wls:Y/GJztKmwiCyOKgBZCP6r7IpuYt9BMct

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_fae949f343130e9116c0b3a6cc744b45

    • Size

      250KB

    • MD5

      fae949f343130e9116c0b3a6cc744b45

    • SHA1

      52f77fc502b799fb6ec93f74cf3fca36cae24cd4

    • SHA256

      d6f2c9d4726562c27080d3d8a276becc689f8453450e86707dd3a2f6a4cb8363

    • SHA512

      a80d46291af48e2d41ee019a88a8cc69a88694b59c2deab81e064ee368c729d9eac4fdd86f8576a6fa5a6460763e1014462641a9b8f354586af861b7b7eca67d

    • SSDEEP

      3072:b8uFqy/b9ztKLKwikmxoLU0/vTuOb7EXllXSLsCZCP6s8Z7OnZi2VCKude0W9wls:Y/GJztKmwiCyOKgBZCP6r7IpuYt9BMct

MITRE ATT&CK Enterprise v15

Tasks