General

  • Target

    JaffaCakes118_1aaa5bec43ac99187b5940c01a75e9bd

  • Size

    228KB

  • Sample

    250222-s8k4jsspby

  • MD5

    1aaa5bec43ac99187b5940c01a75e9bd

  • SHA1

    a47ebc0d70158322f4b4983ad58e278be7d59896

  • SHA256

    b6f550ac385d96229e9a2f3716ab2f238e54b1b22243ea069a26885f4d09ca43

  • SHA512

    7657e10e4d713cfc5e4e0f6fd500b600647a67259d09e420d2b229ff8ff1cc824710726a3d39c713aae9d5bc6a2e848048a2d3abd0678a4fa99a0814b2c28d09

  • SSDEEP

    6144:SLc+jTfw2g7/0YuD+8h2KHPtPnnzfq80jFih2iA28PV7d:SLc+I2g8+O2KpnzCNAh4Fd

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_1aaa5bec43ac99187b5940c01a75e9bd

    • Size

      228KB

    • MD5

      1aaa5bec43ac99187b5940c01a75e9bd

    • SHA1

      a47ebc0d70158322f4b4983ad58e278be7d59896

    • SHA256

      b6f550ac385d96229e9a2f3716ab2f238e54b1b22243ea069a26885f4d09ca43

    • SHA512

      7657e10e4d713cfc5e4e0f6fd500b600647a67259d09e420d2b229ff8ff1cc824710726a3d39c713aae9d5bc6a2e848048a2d3abd0678a4fa99a0814b2c28d09

    • SSDEEP

      6144:SLc+jTfw2g7/0YuD+8h2KHPtPnnzfq80jFih2iA28PV7d:SLc+I2g8+O2KpnzCNAh4Fd

MITRE ATT&CK Enterprise v15

Tasks