General

  • Target

    c5e9ae463b79f481c674682906213504b2b9ca6ec77b5c74215e7abd111dc40bN

  • Size

    212KB

  • Sample

    240919-kswlcazerb

  • MD5

    bfd52ae8428bb523e4a051cd09b87ec0

  • SHA1

    3b885eec90ddfd5698ff2bee53b649398037057e

  • SHA256

    c5e9ae463b79f481c674682906213504b2b9ca6ec77b5c74215e7abd111dc40b

  • SHA512

    b83821ae31edb1cc28088da6a090da00905fa69688020f83bfb2c26a236fabe7fb796ca1efc9c31f59daf63b726dbd21be636db004aa76101d616c764198bb78

  • SSDEEP

    6144:JxNqLW6opBZMU/y/JEGjg+op2BSNCCr7/jU:/A6NBT/yEGjWwa7vU

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      c5e9ae463b79f481c674682906213504b2b9ca6ec77b5c74215e7abd111dc40bN

    • Size

      212KB

    • MD5

      bfd52ae8428bb523e4a051cd09b87ec0

    • SHA1

      3b885eec90ddfd5698ff2bee53b649398037057e

    • SHA256

      c5e9ae463b79f481c674682906213504b2b9ca6ec77b5c74215e7abd111dc40b

    • SHA512

      b83821ae31edb1cc28088da6a090da00905fa69688020f83bfb2c26a236fabe7fb796ca1efc9c31f59daf63b726dbd21be636db004aa76101d616c764198bb78

    • SSDEEP

      6144:JxNqLW6opBZMU/y/JEGjg+op2BSNCCr7/jU:/A6NBT/yEGjWwa7vU

MITRE ATT&CK Enterprise v15

Tasks