General

  • Target

    JaffaCakes118_0fe27e55aa23355f44e8ba1896ee9d90

  • Size

    239KB

  • Sample

    250221-drz4ta1rfm

  • MD5

    0fe27e55aa23355f44e8ba1896ee9d90

  • SHA1

    f41ff09079ed308ba794d12887a354e7ec5f0b40

  • SHA256

    4bd6e92a53236cfeca89553b9139c62b71fc218412842126cabaadc93f696ef8

  • SHA512

    8780e1bfab214ac0b6c47757dd2b09994c3d019370977615cf3e2bfee2cdbb8104b3fdd5101913657e3c59f73c6d2f9ed22de597d3d650b7e657c01d9eac6d24

  • SSDEEP

    6144:XcfqGJSFKnLQXBgBrX227mz4DgAxOvKWr8:stJS40x0pDgAxOv/8

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_0fe27e55aa23355f44e8ba1896ee9d90

    • Size

      239KB

    • MD5

      0fe27e55aa23355f44e8ba1896ee9d90

    • SHA1

      f41ff09079ed308ba794d12887a354e7ec5f0b40

    • SHA256

      4bd6e92a53236cfeca89553b9139c62b71fc218412842126cabaadc93f696ef8

    • SHA512

      8780e1bfab214ac0b6c47757dd2b09994c3d019370977615cf3e2bfee2cdbb8104b3fdd5101913657e3c59f73c6d2f9ed22de597d3d650b7e657c01d9eac6d24

    • SSDEEP

      6144:XcfqGJSFKnLQXBgBrX227mz4DgAxOvKWr8:stJS40x0pDgAxOv/8

MITRE ATT&CK Enterprise v15

Tasks