General

  • Target

    JaffaCakes118_ffa3b825d36efce32e0cc88625ee64b6

  • Size

    256KB

  • Sample

    250216-fkmagstkcq

  • MD5

    ffa3b825d36efce32e0cc88625ee64b6

  • SHA1

    cf772df9eb2931d00a8c8c371982ad9697b47dd0

  • SHA256

    29e0d7c0bdb294399dd5941ec0b2e419e56748ba5fe2a68cba092f58f40bdd51

  • SHA512

    9e6595062f1f219fb2b00d57d1a466c1cfb2eff214f8d2f1238c53c1fb3f21e1067a4142aa12f6d844c80b2994aa53bed0b164c19b7e847ab8e5a43f64f91baf

  • SSDEEP

    6144:GmQ4cV6zoKpvSt4xudvE1SN2uo4VpFSCQVqicxYfPvV:9SszoK83dvkao2FiqicM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ffa3b825d36efce32e0cc88625ee64b6

    • Size

      256KB

    • MD5

      ffa3b825d36efce32e0cc88625ee64b6

    • SHA1

      cf772df9eb2931d00a8c8c371982ad9697b47dd0

    • SHA256

      29e0d7c0bdb294399dd5941ec0b2e419e56748ba5fe2a68cba092f58f40bdd51

    • SHA512

      9e6595062f1f219fb2b00d57d1a466c1cfb2eff214f8d2f1238c53c1fb3f21e1067a4142aa12f6d844c80b2994aa53bed0b164c19b7e847ab8e5a43f64f91baf

    • SSDEEP

      6144:GmQ4cV6zoKpvSt4xudvE1SN2uo4VpFSCQVqicxYfPvV:9SszoK83dvkao2FiqicM

MITRE ATT&CK Enterprise v15

Tasks