General

  • Target

    JaffaCakes118_fb325e4ca1a16324ee211baf2fd9528c

  • Size

    259KB

  • Sample

    250215-wrdjxsxnez

  • MD5

    fb325e4ca1a16324ee211baf2fd9528c

  • SHA1

    1ca4fc83445190a9dbc189c6c82dd19773d34734

  • SHA256

    1916c4d70f547aa6f48ef88e051a32ba59aba80ca391786915f3cdcdc050f2d3

  • SHA512

    e0895465341263393eae679f3358ef6a2655149a5eecdcd6c1f3be9375dc0e61d93a1e1309a4e45a0e8922c2cc7a743844ad37a7c676d567c8197398847a26fd

  • SSDEEP

    6144:PTWe9o2bxVyFWkZzJxtejEfWZDkThADnmJRrtZB59:bXoImYuzheQWZAZ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_fb325e4ca1a16324ee211baf2fd9528c

    • Size

      259KB

    • MD5

      fb325e4ca1a16324ee211baf2fd9528c

    • SHA1

      1ca4fc83445190a9dbc189c6c82dd19773d34734

    • SHA256

      1916c4d70f547aa6f48ef88e051a32ba59aba80ca391786915f3cdcdc050f2d3

    • SHA512

      e0895465341263393eae679f3358ef6a2655149a5eecdcd6c1f3be9375dc0e61d93a1e1309a4e45a0e8922c2cc7a743844ad37a7c676d567c8197398847a26fd

    • SSDEEP

      6144:PTWe9o2bxVyFWkZzJxtejEfWZDkThADnmJRrtZB59:bXoImYuzheQWZAZ

    • Modifies WinLogon for persistence

    • Simda family

    • simda

      Simda is an infostealer written in C++.

    • Downloads MZ/PE file

    • Adds Run key to start application

    • Modifies WinLogon

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks