General

  • Target

    JaffaCakes118_0e3068ef83ede03c1bc5ee22ff116be0

  • Size

    328KB

  • Sample

    250220-zxvxyavlcy

  • MD5

    0e3068ef83ede03c1bc5ee22ff116be0

  • SHA1

    d750ad58894d6d9f4773cb2c027c2dc176feac11

  • SHA256

    aaae97313ac585fd683e41e64b986efec0add3b4367f55333bfb2c98fd4f3c4c

  • SHA512

    889dd2dffc1d2352b41f4f34468f7e6621ceb34c19e21e603c8db9daf11dc532d3a84e7c9e14f2b6f2fc4abef86a2cd4fc82bc8c5cbf34e481e7e5eb2e62ac2c

  • SSDEEP

    6144:NsBFm+fWQX6VpYlaC0H2FLaOyaZ68eflemO+r4RmdT3hl/FTYSkN1:KrfWVWlngwLaFaNef1r4RYRl/Nj

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0e3068ef83ede03c1bc5ee22ff116be0

    • Size

      328KB

    • MD5

      0e3068ef83ede03c1bc5ee22ff116be0

    • SHA1

      d750ad58894d6d9f4773cb2c027c2dc176feac11

    • SHA256

      aaae97313ac585fd683e41e64b986efec0add3b4367f55333bfb2c98fd4f3c4c

    • SHA512

      889dd2dffc1d2352b41f4f34468f7e6621ceb34c19e21e603c8db9daf11dc532d3a84e7c9e14f2b6f2fc4abef86a2cd4fc82bc8c5cbf34e481e7e5eb2e62ac2c

    • SSDEEP

      6144:NsBFm+fWQX6VpYlaC0H2FLaOyaZ68eflemO+r4RmdT3hl/FTYSkN1:KrfWVWlngwLaFaNef1r4RYRl/Nj

MITRE ATT&CK Enterprise v15

Tasks