General

  • Target

    JaffaCakes118_b4d9f52f98f3894e5bece1087280e5d9

  • Size

    310KB

  • Sample

    250413-rab8baxjs6

  • MD5

    b4d9f52f98f3894e5bece1087280e5d9

  • SHA1

    c72c749b2b1eaf6d691bf4183520c9e96ccc4c04

  • SHA256

    8e2a9881932e9e30624c5b45cff74e4364c58d36f18c68f833875053cf232671

  • SHA512

    cd537c32e534f45d31d365f84e4734ea5a570a964bef973dbad0aba86f4b4146beb6eb6145df14263789f5e05b59375ad75f89414d4a991e11c5bebe0b1b3ec5

  • SSDEEP

    6144:zFA0H97YbXinS9eXdWcwFtPz0mt/H2+zGO:ZHVAyyalsPrt/p

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b4d9f52f98f3894e5bece1087280e5d9

    • Size

      310KB

    • MD5

      b4d9f52f98f3894e5bece1087280e5d9

    • SHA1

      c72c749b2b1eaf6d691bf4183520c9e96ccc4c04

    • SHA256

      8e2a9881932e9e30624c5b45cff74e4364c58d36f18c68f833875053cf232671

    • SHA512

      cd537c32e534f45d31d365f84e4734ea5a570a964bef973dbad0aba86f4b4146beb6eb6145df14263789f5e05b59375ad75f89414d4a991e11c5bebe0b1b3ec5

    • SSDEEP

      6144:zFA0H97YbXinS9eXdWcwFtPz0mt/H2+zGO:ZHVAyyalsPrt/p

MITRE ATT&CK Enterprise v16

Tasks