General

  • Target

    JaffaCakes118_b4e1f36a1e02cba9cfdcf86f1ab4c66e

  • Size

    266KB

  • Sample

    250413-rjh28axky4

  • MD5

    b4e1f36a1e02cba9cfdcf86f1ab4c66e

  • SHA1

    11b9825105361e5a71644de482c59531700541a5

  • SHA256

    942664ff4893cfedb50d58f49a484b5bbf8bbc7deab4ff4f8ee1bed6c76b0759

  • SHA512

    98a1970c17980ff497fd786770d842ca7af12ab17da8d36766c87afd66aa8f7044bd3af9c6d182d982220e3d9e402490dc210dd85195c66b3fa28a9845a8d04b

  • SSDEEP

    6144:5kEUickjWCPgmiuLuLjVhzVOEW+U2gcmE2i/Es1NSD4GRGQRureoB:5k2LgmiuLDWPgxiMs1AD4GRGQREB

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b4e1f36a1e02cba9cfdcf86f1ab4c66e

    • Size

      266KB

    • MD5

      b4e1f36a1e02cba9cfdcf86f1ab4c66e

    • SHA1

      11b9825105361e5a71644de482c59531700541a5

    • SHA256

      942664ff4893cfedb50d58f49a484b5bbf8bbc7deab4ff4f8ee1bed6c76b0759

    • SHA512

      98a1970c17980ff497fd786770d842ca7af12ab17da8d36766c87afd66aa8f7044bd3af9c6d182d982220e3d9e402490dc210dd85195c66b3fa28a9845a8d04b

    • SSDEEP

      6144:5kEUickjWCPgmiuLuLjVhzVOEW+U2gcmE2i/Es1NSD4GRGQRureoB:5k2LgmiuLDWPgxiMs1AD4GRGQREB

MITRE ATT&CK Enterprise v16

Tasks