General

  • Target

    JaffaCakes118_17d10f359999b2e0515107def393296d

  • Size

    275KB

  • Sample

    250222-g62sqs1rv5

  • MD5

    17d10f359999b2e0515107def393296d

  • SHA1

    ccd06af8a0bd08f46f1354ddaab593cf0da9c0af

  • SHA256

    e71e32fe2672a8b085fc6130ccfb9e9ed0f341bc98039565cc4308f3066d9672

  • SHA512

    86e33fc92ac8a27072eaa68b2c78782b1339ff03dbd32366978bb3fd254a686cfe539407727f9f419bcf41aac14b48cf4abb75bd2f81e737025d28cf944b2d9a

  • SSDEEP

    6144:rUwzVchJX0Tac814i5mO/3RMdoEWykYYhpok/BFtFcahw6k:NzVczX0s4er/3RiNWzhpok/BFLzhN

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_17d10f359999b2e0515107def393296d

    • Size

      275KB

    • MD5

      17d10f359999b2e0515107def393296d

    • SHA1

      ccd06af8a0bd08f46f1354ddaab593cf0da9c0af

    • SHA256

      e71e32fe2672a8b085fc6130ccfb9e9ed0f341bc98039565cc4308f3066d9672

    • SHA512

      86e33fc92ac8a27072eaa68b2c78782b1339ff03dbd32366978bb3fd254a686cfe539407727f9f419bcf41aac14b48cf4abb75bd2f81e737025d28cf944b2d9a

    • SSDEEP

      6144:rUwzVchJX0Tac814i5mO/3RMdoEWykYYhpok/BFtFcahw6k:NzVczX0s4er/3RiNWzhpok/BFLzhN

MITRE ATT&CK Enterprise v15

Tasks