General

  • Target

    JaffaCakes118_0d255bcab62153f5f3cd5d2fc699bb04

  • Size

    335KB

  • Sample

    250220-vwyvzs1lbj

  • MD5

    0d255bcab62153f5f3cd5d2fc699bb04

  • SHA1

    1ab1805319ecf07d569728c44572a2348c80b71f

  • SHA256

    3d9aff12cd7526f6a947b44b2ec2ea9e1de74db4481a80cca1dbb1351737c5b4

  • SHA512

    01fef8c7523816013816c2437e609a85a44e0a474f63667f6d7f4e8fa58598db42d246ee4fd845bcc39e25dbcf9266f0327044f14c19bb0d3272edc7911548f9

  • SSDEEP

    6144:vDTkT+bYTdPpcjNE4IitaE5XGUSa2Ux4S+RFWKvk6f:MT5TDc64IitaF5arik

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0d255bcab62153f5f3cd5d2fc699bb04

    • Size

      335KB

    • MD5

      0d255bcab62153f5f3cd5d2fc699bb04

    • SHA1

      1ab1805319ecf07d569728c44572a2348c80b71f

    • SHA256

      3d9aff12cd7526f6a947b44b2ec2ea9e1de74db4481a80cca1dbb1351737c5b4

    • SHA512

      01fef8c7523816013816c2437e609a85a44e0a474f63667f6d7f4e8fa58598db42d246ee4fd845bcc39e25dbcf9266f0327044f14c19bb0d3272edc7911548f9

    • SSDEEP

      6144:vDTkT+bYTdPpcjNE4IitaE5XGUSa2Ux4S+RFWKvk6f:MT5TDc64IitaF5arik

MITRE ATT&CK Enterprise v15

Tasks