General

  • Target

    JaffaCakes118_be657f3e6d92ff2f725ffb71e0a6f57f

  • Size

    302KB

  • Sample

    250418-rg6qhaxrz5

  • MD5

    be657f3e6d92ff2f725ffb71e0a6f57f

  • SHA1

    4cfab5ecaa5acd7aab2703b328563240d87ef232

  • SHA256

    e3448724310df2c2bf6576af2ab8bb0bfcc5dd74b55f6c67fc3469d1c1892bc0

  • SHA512

    8a92d70edb9318c637ba17803320f53bc0ccf5b260eb4792732b4c6824c141b668c2d57f45e602eb28b6b1d884097fa73b068f8ec087e2fbab396b3c4844439b

  • SSDEEP

    6144:Qr7beYd6upMOOsrLJffxOD3pZSVrdoTeJsVkbE9ucqe7fWJGflTvuLE:Qr7yFf0LJffxOD5ZSRdoTeq59ufe7fWK

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_be657f3e6d92ff2f725ffb71e0a6f57f

    • Size

      302KB

    • MD5

      be657f3e6d92ff2f725ffb71e0a6f57f

    • SHA1

      4cfab5ecaa5acd7aab2703b328563240d87ef232

    • SHA256

      e3448724310df2c2bf6576af2ab8bb0bfcc5dd74b55f6c67fc3469d1c1892bc0

    • SHA512

      8a92d70edb9318c637ba17803320f53bc0ccf5b260eb4792732b4c6824c141b668c2d57f45e602eb28b6b1d884097fa73b068f8ec087e2fbab396b3c4844439b

    • SSDEEP

      6144:Qr7beYd6upMOOsrLJffxOD3pZSVrdoTeJsVkbE9ucqe7fWJGflTvuLE:Qr7yFf0LJffxOD5ZSRdoTeq59ufe7fWK

MITRE ATT&CK Enterprise v16

Tasks