General

  • Target

    JaffaCakes118_0d27ebfe23363367f6b44e483e8bcc7c

  • Size

    258KB

  • Sample

    250220-vyq8xs1lhk

  • MD5

    0d27ebfe23363367f6b44e483e8bcc7c

  • SHA1

    b88e925506fe2123fc9bd79b974aae4600a8cb07

  • SHA256

    40d98f82e36ea5c5ba587e82ded7c1d818aba5b26e5888407156b3b4f8035caa

  • SHA512

    91036d3acb381e8b36670344192818e67409996e215e0455c357254e39b0f2934886f992bcaa5cff0f1e6e175c18dc76f4ec8c5240e8f3b0cf1d98f739592d3e

  • SSDEEP

    6144:IyqIDbw+NoziFRZLob+lBpdgEA1fmd4qgvSg2nH:PqID/PZLob+lBpdXYmSq+STH

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0d27ebfe23363367f6b44e483e8bcc7c

    • Size

      258KB

    • MD5

      0d27ebfe23363367f6b44e483e8bcc7c

    • SHA1

      b88e925506fe2123fc9bd79b974aae4600a8cb07

    • SHA256

      40d98f82e36ea5c5ba587e82ded7c1d818aba5b26e5888407156b3b4f8035caa

    • SHA512

      91036d3acb381e8b36670344192818e67409996e215e0455c357254e39b0f2934886f992bcaa5cff0f1e6e175c18dc76f4ec8c5240e8f3b0cf1d98f739592d3e

    • SSDEEP

      6144:IyqIDbw+NoziFRZLob+lBpdgEA1fmd4qgvSg2nH:PqID/PZLob+lBpdXYmSq+STH

MITRE ATT&CK Enterprise v15

Tasks