General

  • Target

    JaffaCakes118_b6c17712b0efd24ce10a4e95303ddd1d

  • Size

    283KB

  • Sample

    250414-gabxfazlx4

  • MD5

    b6c17712b0efd24ce10a4e95303ddd1d

  • SHA1

    290072846bd5b4e77ad61b8c3ae3b4acd4120294

  • SHA256

    00fdcea299be54070b9aba1eb0c90099e2c768fd5ec9f0e5d57b02281b1418eb

  • SHA512

    979ebadab98a6c098ea62ad616b6879ee04cab91acecbf0f74d19777c03b57e3ce6f83ba861dcd6f686b37c0f1385803603d9b299599147d9b10da0ae5800b0a

  • SSDEEP

    6144:/ggjN08z6NtTzCJjvfCiCYBnrgH1l/jdN1IBonLdcJghNCGwPvLkNj:/zjx04JjbBnEHjB82nL5hNC9wZ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_b6c17712b0efd24ce10a4e95303ddd1d

    • Size

      283KB

    • MD5

      b6c17712b0efd24ce10a4e95303ddd1d

    • SHA1

      290072846bd5b4e77ad61b8c3ae3b4acd4120294

    • SHA256

      00fdcea299be54070b9aba1eb0c90099e2c768fd5ec9f0e5d57b02281b1418eb

    • SHA512

      979ebadab98a6c098ea62ad616b6879ee04cab91acecbf0f74d19777c03b57e3ce6f83ba861dcd6f686b37c0f1385803603d9b299599147d9b10da0ae5800b0a

    • SSDEEP

      6144:/ggjN08z6NtTzCJjvfCiCYBnrgH1l/jdN1IBonLdcJghNCGwPvLkNj:/zjx04JjbBnEHjB82nL5hNC9wZ

MITRE ATT&CK Enterprise v16

Tasks