General

  • Target

    JaffaCakes118_bf97b72ce4a0338088936143d596b102

  • Size

    206KB

  • Sample

    250418-yxk73atxhw

  • MD5

    bf97b72ce4a0338088936143d596b102

  • SHA1

    399ec52a42f43b99acef865a1187619205890d1e

  • SHA256

    8a2dc48857eedede0cf7e0c8c056476fb59649200ba7e71e7aa0b054efd46e72

  • SHA512

    73a850c6472f7f6f62851359687f1a1171ec167e30ab5e5fb7199cf032c9ba2280f3ffd4282696445f7e08ee42f712226510cfea084ea6da5e9953a5d242ec90

  • SSDEEP

    3072:pZKoxQb+k9QvlM2UomDQEGPjRHfNtPYuD/V9P8rMz8csf2jacKUSI7Lj/PKbcVGX:Lrox9QUkEq9/nP3D/jP8Pcu65GbNwy

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      JaffaCakes118_bf97b72ce4a0338088936143d596b102

    • Size

      206KB

    • MD5

      bf97b72ce4a0338088936143d596b102

    • SHA1

      399ec52a42f43b99acef865a1187619205890d1e

    • SHA256

      8a2dc48857eedede0cf7e0c8c056476fb59649200ba7e71e7aa0b054efd46e72

    • SHA512

      73a850c6472f7f6f62851359687f1a1171ec167e30ab5e5fb7199cf032c9ba2280f3ffd4282696445f7e08ee42f712226510cfea084ea6da5e9953a5d242ec90

    • SSDEEP

      3072:pZKoxQb+k9QvlM2UomDQEGPjRHfNtPYuD/V9P8rMz8csf2jacKUSI7Lj/PKbcVGX:Lrox9QUkEq9/nP3D/jP8Pcu65GbNwy

MITRE ATT&CK Enterprise v16

Tasks