General

  • Target

    JaffaCakes118_be6f20b2e737a97abdd7dd2c7c00961e

  • Size

    283KB

  • Sample

    250418-rpam2aykw3

  • MD5

    be6f20b2e737a97abdd7dd2c7c00961e

  • SHA1

    831fb7c3e64470f814d5380999a453bae25580c5

  • SHA256

    d93ffa8d7084e845143e873f008fccf133d17cdf2f57e18c67c6f56ba7a278bf

  • SHA512

    fbe7aa6600d8606ea861571b1a748cfd2ccd9b876825d527bd4379ecac80ae099a6bb90eefbec69bef671ad05e74e5605867f4d5b0c1b5120d80635a307d60dd

  • SSDEEP

    6144:fggjN08z6NtTzCJjvfCiCYBnrgH1l/jdN1IBonLdcJghNCGwPvLkNj:fzjx04JjbBnEHjB82nL5hNC9wZ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_be6f20b2e737a97abdd7dd2c7c00961e

    • Size

      283KB

    • MD5

      be6f20b2e737a97abdd7dd2c7c00961e

    • SHA1

      831fb7c3e64470f814d5380999a453bae25580c5

    • SHA256

      d93ffa8d7084e845143e873f008fccf133d17cdf2f57e18c67c6f56ba7a278bf

    • SHA512

      fbe7aa6600d8606ea861571b1a748cfd2ccd9b876825d527bd4379ecac80ae099a6bb90eefbec69bef671ad05e74e5605867f4d5b0c1b5120d80635a307d60dd

    • SSDEEP

      6144:fggjN08z6NtTzCJjvfCiCYBnrgH1l/jdN1IBonLdcJghNCGwPvLkNj:fzjx04JjbBnEHjB82nL5hNC9wZ

MITRE ATT&CK Enterprise v16

Tasks