General

  • Target

    JaffaCakes118_b8c37f70a1dd1a1a46af1d0bd06ea662

  • Size

    206KB

  • Sample

    250414-x7dejayns5

  • MD5

    b8c37f70a1dd1a1a46af1d0bd06ea662

  • SHA1

    c771a9114548a25a9afd01d2abd7c2060462a90d

  • SHA256

    7a32666b4ddc2d411922bcf7d2b61fe0cd04a49ce7cebb8c5a019ddb3ba26820

  • SHA512

    b6ed2aee3e9a211c44ac8de651582f8b8f67e6eb77cea04c07fbda1fe6c27e6a026f39f14f2a1b89df481fcfe11f960a028227d91028655dc12d4658125afe28

  • SSDEEP

    3072:MZKoxQb+k9QvlM2UomDQEGPjRHfNtPYuD/V9P8rMz8csf2jacKUSI7Lj/PKbcVGX:Krox9QUkEq9/nP3D/jP8Pcu65GbNwy

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_b8c37f70a1dd1a1a46af1d0bd06ea662

    • Size

      206KB

    • MD5

      b8c37f70a1dd1a1a46af1d0bd06ea662

    • SHA1

      c771a9114548a25a9afd01d2abd7c2060462a90d

    • SHA256

      7a32666b4ddc2d411922bcf7d2b61fe0cd04a49ce7cebb8c5a019ddb3ba26820

    • SHA512

      b6ed2aee3e9a211c44ac8de651582f8b8f67e6eb77cea04c07fbda1fe6c27e6a026f39f14f2a1b89df481fcfe11f960a028227d91028655dc12d4658125afe28

    • SSDEEP

      3072:MZKoxQb+k9QvlM2UomDQEGPjRHfNtPYuD/V9P8rMz8csf2jacKUSI7Lj/PKbcVGX:Krox9QUkEq9/nP3D/jP8Pcu65GbNwy

MITRE ATT&CK Enterprise v16

Tasks