General

  • Target

    70dcc063d21ae4bec7e7bc7553e9ebbaa3337e63db6711059ec86f04e90be8b4

  • Size

    211KB

  • Sample

    240913-lzpl2sxaqr

  • MD5

    2a176f330eb9dcb844183dd9648b2b5c

  • SHA1

    eb366ced706af104a7724380da4a6463ec1c4033

  • SHA256

    70dcc063d21ae4bec7e7bc7553e9ebbaa3337e63db6711059ec86f04e90be8b4

  • SHA512

    84750bb8aec7453c5caddaf86d53b9b77f73beda11269ee46bb7cacfc23e0e9594458dde83116508b6a4556008fe017cb979bd484ebe83491e48bdaabc6d939d

  • SSDEEP

    6144:dmKVGe1XIpQiU/ma3MB8hH2Tkp6bYnWcZVol0N5TzQ3:F71YpQiU/RcO1VQInVob

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      70dcc063d21ae4bec7e7bc7553e9ebbaa3337e63db6711059ec86f04e90be8b4

    • Size

      211KB

    • MD5

      2a176f330eb9dcb844183dd9648b2b5c

    • SHA1

      eb366ced706af104a7724380da4a6463ec1c4033

    • SHA256

      70dcc063d21ae4bec7e7bc7553e9ebbaa3337e63db6711059ec86f04e90be8b4

    • SHA512

      84750bb8aec7453c5caddaf86d53b9b77f73beda11269ee46bb7cacfc23e0e9594458dde83116508b6a4556008fe017cb979bd484ebe83491e48bdaabc6d939d

    • SSDEEP

      6144:dmKVGe1XIpQiU/ma3MB8hH2Tkp6bYnWcZVol0N5TzQ3:F71YpQiU/RcO1VQInVob

MITRE ATT&CK Enterprise v15

Tasks