General

  • Target

    JaffaCakes118_04b64f16fd1d5416d095b5173ec95050

  • Size

    307KB

  • Sample

    250219-lrtwssylhp

  • MD5

    04b64f16fd1d5416d095b5173ec95050

  • SHA1

    a457c4fef8fa328d29067eee6a1c5c841650fdf2

  • SHA256

    98f5f4784c9f7b668c9bd2cef3f802324e9a6b896b11457b484040dfd1bb26ed

  • SHA512

    5c6591ab485857710f4aeae160260e04f246dc3bce64f1f72c4125216caf51d55cfaad4ddfe48341bb1a4fe0e51aab98b7eaf99ac60c11458b0d8aec0ca9e984

  • SSDEEP

    6144:V37k7vL3JO5O5RcBQHUhndpvARzQqZrVBnziQMOo4Za0zrDXpED9b:V3ovZO4RcBQ2v6Mir3uQMORaOrQ9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_04b64f16fd1d5416d095b5173ec95050

    • Size

      307KB

    • MD5

      04b64f16fd1d5416d095b5173ec95050

    • SHA1

      a457c4fef8fa328d29067eee6a1c5c841650fdf2

    • SHA256

      98f5f4784c9f7b668c9bd2cef3f802324e9a6b896b11457b484040dfd1bb26ed

    • SHA512

      5c6591ab485857710f4aeae160260e04f246dc3bce64f1f72c4125216caf51d55cfaad4ddfe48341bb1a4fe0e51aab98b7eaf99ac60c11458b0d8aec0ca9e984

    • SSDEEP

      6144:V37k7vL3JO5O5RcBQHUhndpvARzQqZrVBnziQMOo4Za0zrDXpED9b:V3ovZO4RcBQ2v6Mir3uQMORaOrQ9

MITRE ATT&CK Enterprise v15

Tasks