General

  • Target

    JaffaCakes118_05afbc1ae1330a197b402222c2fb8d4f

  • Size

    282KB

  • Sample

    250219-qkqysatjx4

  • MD5

    05afbc1ae1330a197b402222c2fb8d4f

  • SHA1

    c7d52541d5c7501fea10f858a02e6a56ebf17e71

  • SHA256

    0b92882b1907aac4d5d58e946f79da033813a556ca0d83aca8bf63c2bb9e6a45

  • SHA512

    f777dd43b9e8a322ff25d8640df7ec43c313363da0e82471b4635fa5d40bbe21562307a8dfb3d26cb822d4795be2189194dc3148f07e483b50167a3c6d68a689

  • SSDEEP

    6144:JZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:jFTxWYMh5qoLb8LCy9E

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_05afbc1ae1330a197b402222c2fb8d4f

    • Size

      282KB

    • MD5

      05afbc1ae1330a197b402222c2fb8d4f

    • SHA1

      c7d52541d5c7501fea10f858a02e6a56ebf17e71

    • SHA256

      0b92882b1907aac4d5d58e946f79da033813a556ca0d83aca8bf63c2bb9e6a45

    • SHA512

      f777dd43b9e8a322ff25d8640df7ec43c313363da0e82471b4635fa5d40bbe21562307a8dfb3d26cb822d4795be2189194dc3148f07e483b50167a3c6d68a689

    • SSDEEP

      6144:JZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:jFTxWYMh5qoLb8LCy9E

MITRE ATT&CK Enterprise v15

Tasks