General

  • Target

    JaffaCakes118_19fcb483074e31af2a87bfa58d71a160

  • Size

    250KB

  • Sample

    250222-qt3nyaypv6

  • MD5

    19fcb483074e31af2a87bfa58d71a160

  • SHA1

    7fa0f3025963913090b2a13c36ed80e54accebe3

  • SHA256

    5dd999c5e7e996cf88fc1b6bf400e220d98fabf6b7d45e546e008ea8f28b3d94

  • SHA512

    a98adb93ad6ccbb47a5af50d46cf80bbb462096c12f31f5b7d894a68f3afd5523a6ca6f1bb8d8d3fc4216eb962a933f9660a8d29c2993e5598af99e5b9cd6914

  • SSDEEP

    3072:RWKU3oAlhkYTWcG+xRVwH8vSXO9LYZqXl03NSsAFsxwT5oeex4YKpX5z3pv25IgU:pU7pZwrGLCqXl03AsIs6fGMtFO+FF42

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_19fcb483074e31af2a87bfa58d71a160

    • Size

      250KB

    • MD5

      19fcb483074e31af2a87bfa58d71a160

    • SHA1

      7fa0f3025963913090b2a13c36ed80e54accebe3

    • SHA256

      5dd999c5e7e996cf88fc1b6bf400e220d98fabf6b7d45e546e008ea8f28b3d94

    • SHA512

      a98adb93ad6ccbb47a5af50d46cf80bbb462096c12f31f5b7d894a68f3afd5523a6ca6f1bb8d8d3fc4216eb962a933f9660a8d29c2993e5598af99e5b9cd6914

    • SSDEEP

      3072:RWKU3oAlhkYTWcG+xRVwH8vSXO9LYZqXl03NSsAFsxwT5oeex4YKpX5z3pv25IgU:pU7pZwrGLCqXl03AsIs6fGMtFO+FF42

MITRE ATT&CK Enterprise v15

Tasks