General

  • Target

    JaffaCakes118_ffc4fd43bfcd75a45a61b104792f16ab

  • Size

    288KB

  • Sample

    250216-fycyzavlcw

  • MD5

    ffc4fd43bfcd75a45a61b104792f16ab

  • SHA1

    01502075df078c2593196d2f7155090d7a384f28

  • SHA256

    f907448570504a58fd474a3f2fd1ec28553fcd6c6f7eb6d696e57ad39a44ee5a

  • SHA512

    2ae42b01bfa1f1e3c494d9732f3b02daf43451429905c40fc1e323a1fa69d6149d35f0483e322e16f9c65c02b0ec2c6d74a08125f681a8fb9de3ad3bce383077

  • SSDEEP

    6144:QLLlGt4bi8L3AStMeLsumXJ4wIfN3KqBkMpIT42jj+pLwuR:ERyqBDtLKZ4pNr2oLh

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_ffc4fd43bfcd75a45a61b104792f16ab

    • Size

      288KB

    • MD5

      ffc4fd43bfcd75a45a61b104792f16ab

    • SHA1

      01502075df078c2593196d2f7155090d7a384f28

    • SHA256

      f907448570504a58fd474a3f2fd1ec28553fcd6c6f7eb6d696e57ad39a44ee5a

    • SHA512

      2ae42b01bfa1f1e3c494d9732f3b02daf43451429905c40fc1e323a1fa69d6149d35f0483e322e16f9c65c02b0ec2c6d74a08125f681a8fb9de3ad3bce383077

    • SSDEEP

      6144:QLLlGt4bi8L3AStMeLsumXJ4wIfN3KqBkMpIT42jj+pLwuR:ERyqBDtLKZ4pNr2oLh

MITRE ATT&CK Enterprise v15

Tasks