General

  • Target

    JaffaCakes118_fe8195bc21e8a4c2f0331e3116876130

  • Size

    259KB

  • Sample

    250216-cjanhswnaj

  • MD5

    fe8195bc21e8a4c2f0331e3116876130

  • SHA1

    e48dd05365472597a9c473bf849cfd067ab0f5f2

  • SHA256

    a49f1e8833e44ad5249f9b9b7779b718bea013c675ccbf2af68133eb2491f182

  • SHA512

    3f48e5da83892e0ad2e731f093c79ef1699272838b9ce5702b9e8fe5b6d797aaf2a88a145e4692ebee896666d7c8a7b3fd3a371cb363dc10c00dc2458a326eef

  • SSDEEP

    6144:l3tMcM0vfC9eyIN4mZpMksmy75/cyCtO/IzWve:hCr0S9eyIN7ZpMksx7Zc70/s

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_fe8195bc21e8a4c2f0331e3116876130

    • Size

      259KB

    • MD5

      fe8195bc21e8a4c2f0331e3116876130

    • SHA1

      e48dd05365472597a9c473bf849cfd067ab0f5f2

    • SHA256

      a49f1e8833e44ad5249f9b9b7779b718bea013c675ccbf2af68133eb2491f182

    • SHA512

      3f48e5da83892e0ad2e731f093c79ef1699272838b9ce5702b9e8fe5b6d797aaf2a88a145e4692ebee896666d7c8a7b3fd3a371cb363dc10c00dc2458a326eef

    • SSDEEP

      6144:l3tMcM0vfC9eyIN4mZpMksmy75/cyCtO/IzWve:hCr0S9eyIN7ZpMksx7Zc70/s

MITRE ATT&CK Enterprise v15

Tasks