General

  • Target

    JaffaCakes118_fdcd77495680731bd6b960767f6bbc1d

  • Size

    243KB

  • Sample

    250216-aqtnvsslcp

  • MD5

    fdcd77495680731bd6b960767f6bbc1d

  • SHA1

    c926f323aa148dc2a5f713656d07132ca1affe47

  • SHA256

    adcf4b4d3d2c9a60a352e5671f6070d8aafdf28e697c651a2de2456d2e985082

  • SHA512

    4d8688d40ac6c67d64eb818ed8e8e0b62bd7627d1b7bad7703651e6d47e72707cd94a12ec5238bc656c6524b56af34233ee5fd12fd3ac2915f61b91682bc5fe3

  • SSDEEP

    6144:PnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:RTKCS2sjWC1rfd/Rtqc7HqkYh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_fdcd77495680731bd6b960767f6bbc1d

    • Size

      243KB

    • MD5

      fdcd77495680731bd6b960767f6bbc1d

    • SHA1

      c926f323aa148dc2a5f713656d07132ca1affe47

    • SHA256

      adcf4b4d3d2c9a60a352e5671f6070d8aafdf28e697c651a2de2456d2e985082

    • SHA512

      4d8688d40ac6c67d64eb818ed8e8e0b62bd7627d1b7bad7703651e6d47e72707cd94a12ec5238bc656c6524b56af34233ee5fd12fd3ac2915f61b91682bc5fe3

    • SSDEEP

      6144:PnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:RTKCS2sjWC1rfd/Rtqc7HqkYh

MITRE ATT&CK Enterprise v15

Tasks