General

  • Target

    JaffaCakes118_c6526c004cedb67f64ec704d3d85482f

  • Size

    253KB

  • Sample

    250420-r8f9xs1qz3

  • MD5

    c6526c004cedb67f64ec704d3d85482f

  • SHA1

    bbe12a6276f2775660fd50acf4c5edccfb168c2c

  • SHA256

    cecd9df5f8e36f64d3583efd1347ceba1e2fa21bcf3227d70982655f438248c4

  • SHA512

    4871a93dc372e2271f4ec30f2bab4d1498c6e9cf9555501292c643c44ec0d0c3375d4b4182498ed69ddbfc341c63432c09bfce9aaf825cc2bf891fdc69c07ef9

  • SSDEEP

    6144:Q/wbFgTi2RsbXzeLjzOg/QQR9AXJChcl5hDfKJ39y9q+SvpY:Q/wpxXMzfQQRqXiE5hjKneX

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      JaffaCakes118_c6526c004cedb67f64ec704d3d85482f

    • Size

      253KB

    • MD5

      c6526c004cedb67f64ec704d3d85482f

    • SHA1

      bbe12a6276f2775660fd50acf4c5edccfb168c2c

    • SHA256

      cecd9df5f8e36f64d3583efd1347ceba1e2fa21bcf3227d70982655f438248c4

    • SHA512

      4871a93dc372e2271f4ec30f2bab4d1498c6e9cf9555501292c643c44ec0d0c3375d4b4182498ed69ddbfc341c63432c09bfce9aaf825cc2bf891fdc69c07ef9

    • SSDEEP

      6144:Q/wbFgTi2RsbXzeLjzOg/QQR9AXJChcl5hDfKJ39y9q+SvpY:Q/wpxXMzfQQRqXiE5hjKneX

MITRE ATT&CK Enterprise v16

Tasks