General

  • Target

    JaffaCakes118_125e2633511c5e328181d6dc890a4c5a

  • Size

    210KB

  • Sample

    250221-nv7yyasrs4

  • MD5

    125e2633511c5e328181d6dc890a4c5a

  • SHA1

    75f2e63120d9c6cb9e43f6cbde8181a26b7dcfdb

  • SHA256

    7a13ff090140e332095d452d3f6e135762b6f8adbca8a2620f35870a764f2905

  • SHA512

    a688e2f084767a1ed67893d03a3866f447f3190ddf94d753fb9472a1d89e3ac55f6493b894ee1811885af06e1e3f2a9375853d17d086aae7968bba10d5cb5649

  • SSDEEP

    6144:hNS5VmS/+PRHgzKmHMyTTaPrPXa3rkO2E1eJ+p:hIaxgzKmRUs+Oe0

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_125e2633511c5e328181d6dc890a4c5a

    • Size

      210KB

    • MD5

      125e2633511c5e328181d6dc890a4c5a

    • SHA1

      75f2e63120d9c6cb9e43f6cbde8181a26b7dcfdb

    • SHA256

      7a13ff090140e332095d452d3f6e135762b6f8adbca8a2620f35870a764f2905

    • SHA512

      a688e2f084767a1ed67893d03a3866f447f3190ddf94d753fb9472a1d89e3ac55f6493b894ee1811885af06e1e3f2a9375853d17d086aae7968bba10d5cb5649

    • SSDEEP

      6144:hNS5VmS/+PRHgzKmHMyTTaPrPXa3rkO2E1eJ+p:hIaxgzKmRUs+Oe0

MITRE ATT&CK Enterprise v15

Tasks