General

  • Target

    JaffaCakes118_01a6c3bbc0c611b375c076ce2fdf68cd

  • Size

    311KB

  • Sample

    250218-zrkvsa1j19

  • MD5

    01a6c3bbc0c611b375c076ce2fdf68cd

  • SHA1

    d9a14f412d593c3946626193f00a41002d218a8e

  • SHA256

    01d44268ec9e0f5918ca9547ef5921eee3e48f7da4df4f267ad2dcefbc059832

  • SHA512

    622880dba5874ab77c2f9979f00ea3eae6e7454c01ed3a25e4574ce94ec10df12c5976c7da0b76c452c6f1722901f61d5713651ac55690b530cf04eada483d86

  • SSDEEP

    6144:wLw+ZtK9ynCwKgGNZldkKi9tgMPNuERLYxn3szSIGzQbysmIFZsT:mtKEU/iXPle3szPGUbysNA

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_01a6c3bbc0c611b375c076ce2fdf68cd

    • Size

      311KB

    • MD5

      01a6c3bbc0c611b375c076ce2fdf68cd

    • SHA1

      d9a14f412d593c3946626193f00a41002d218a8e

    • SHA256

      01d44268ec9e0f5918ca9547ef5921eee3e48f7da4df4f267ad2dcefbc059832

    • SHA512

      622880dba5874ab77c2f9979f00ea3eae6e7454c01ed3a25e4574ce94ec10df12c5976c7da0b76c452c6f1722901f61d5713651ac55690b530cf04eada483d86

    • SSDEEP

      6144:wLw+ZtK9ynCwKgGNZldkKi9tgMPNuERLYxn3szSIGzQbysmIFZsT:mtKEU/iXPle3szPGUbysNA

MITRE ATT&CK Enterprise v15

Tasks