General

  • Target

    JaffaCakes118_038cf9bd3eb0ffc6ad4b44cdfbfcee8f

  • Size

    308KB

  • Sample

    250219-fn18tazkz9

  • MD5

    038cf9bd3eb0ffc6ad4b44cdfbfcee8f

  • SHA1

    a63cf059e3423cfe02dcf4f4b705e36fa119da80

  • SHA256

    0c56370e55d907e6c1a29e0a49a56ab4ead226f0a8fe56642e325214e62cf863

  • SHA512

    b8ec11611341812e045f16f7796438d5446028da31516c426ed325970e7b3b6fb36d09888bca74447d4dc67ef82b601712966023e85a4de1cb4d8068cb5e867d

  • SSDEEP

    6144:/rqk6h1AA1X3pwZmTT4VU9vKbURF/AD+8K05aR7MjP1Kqlto:/QIMmZmTmGFqKeP

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_038cf9bd3eb0ffc6ad4b44cdfbfcee8f

    • Size

      308KB

    • MD5

      038cf9bd3eb0ffc6ad4b44cdfbfcee8f

    • SHA1

      a63cf059e3423cfe02dcf4f4b705e36fa119da80

    • SHA256

      0c56370e55d907e6c1a29e0a49a56ab4ead226f0a8fe56642e325214e62cf863

    • SHA512

      b8ec11611341812e045f16f7796438d5446028da31516c426ed325970e7b3b6fb36d09888bca74447d4dc67ef82b601712966023e85a4de1cb4d8068cb5e867d

    • SSDEEP

      6144:/rqk6h1AA1X3pwZmTT4VU9vKbURF/AD+8K05aR7MjP1Kqlto:/QIMmZmTmGFqKeP

MITRE ATT&CK Enterprise v15

Tasks