General

  • Target

    JaffaCakes118_0dae9455ad7650dad4333a8b392f46e0

  • Size

    243KB

  • Sample

    250220-xzle6svlv4

  • MD5

    0dae9455ad7650dad4333a8b392f46e0

  • SHA1

    cbb95534860828ee5fd1ec777560d7b0ab128179

  • SHA256

    2edcf012f2d2b182fb8a8f91207c4c6d27da4f7cc1ce4c1c8213069919016713

  • SHA512

    5f50f195881f66a484f322d0648432c0d2d1b7333d7d24fc0a51574dbb4bb5fbe94f28ed07f07afd11b834d0e5eaf32459435aeea046a9ed21b36060b1f338e4

  • SSDEEP

    3072:ypUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:ypUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0dae9455ad7650dad4333a8b392f46e0

    • Size

      243KB

    • MD5

      0dae9455ad7650dad4333a8b392f46e0

    • SHA1

      cbb95534860828ee5fd1ec777560d7b0ab128179

    • SHA256

      2edcf012f2d2b182fb8a8f91207c4c6d27da4f7cc1ce4c1c8213069919016713

    • SHA512

      5f50f195881f66a484f322d0648432c0d2d1b7333d7d24fc0a51574dbb4bb5fbe94f28ed07f07afd11b834d0e5eaf32459435aeea046a9ed21b36060b1f338e4

    • SSDEEP

      3072:ypUznES8pra2nPi8Or85tCZ1GeYhH3xZhaXdg6/0/TAq2qd4EVfJWaRcpz80WQdc:ypUEnZPl5tU1Ge+3xZUpq7dldIwc6Ujg

MITRE ATT&CK Enterprise v15

Tasks