General

  • Target

    JaffaCakes118_06a05a4e0f9ae5e3d5a2ef248cf5b3fc

  • Size

    288KB

  • Sample

    250219-vcem1avlas

  • MD5

    06a05a4e0f9ae5e3d5a2ef248cf5b3fc

  • SHA1

    7ec186b5d627a3a97b5da3a8686997f89c7deef5

  • SHA256

    978a43d5ed55359ef223116fd7396b1b982e5db2b945e69c96ed325d78f14a4a

  • SHA512

    3b42ca9b4a5be3385d5a725b40d0f9fc3066dca554e4446ecb344aedc48c73a4a27cae0a41a7bb04c73ded986f4d53c3ba65b25b5833b77f9ab968e21e759851

  • SSDEEP

    6144:h8OS7LtKfBcmgxmzi/yESXVU1kIlTzz0/YtNYiH1oHthCNvJLv:GzYpc4+/t1ZTH0/6NYzHwv5v

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_06a05a4e0f9ae5e3d5a2ef248cf5b3fc

    • Size

      288KB

    • MD5

      06a05a4e0f9ae5e3d5a2ef248cf5b3fc

    • SHA1

      7ec186b5d627a3a97b5da3a8686997f89c7deef5

    • SHA256

      978a43d5ed55359ef223116fd7396b1b982e5db2b945e69c96ed325d78f14a4a

    • SHA512

      3b42ca9b4a5be3385d5a725b40d0f9fc3066dca554e4446ecb344aedc48c73a4a27cae0a41a7bb04c73ded986f4d53c3ba65b25b5833b77f9ab968e21e759851

    • SSDEEP

      6144:h8OS7LtKfBcmgxmzi/yESXVU1kIlTzz0/YtNYiH1oHthCNvJLv:GzYpc4+/t1ZTH0/6NYzHwv5v

MITRE ATT&CK Enterprise v15

Tasks