General

  • Target

    4c6501bff45504cf7e8f0e29dfc048c6a71a3c8ab89f44a6f2ee65b42d4d9e01N

  • Size

    278KB

  • Sample

    240920-ls996s1akq

  • MD5

    e73bfed3103c9c93dd1ed8a60541ef80

  • SHA1

    76e96cfbea3a10f02f9b70f57cbfb57745681c84

  • SHA256

    4c6501bff45504cf7e8f0e29dfc048c6a71a3c8ab89f44a6f2ee65b42d4d9e01

  • SHA512

    0c2c0ef2892f12ae2b9aee5c474995cb5c9b83e87bf988b4d361e6f5e28fad084807e067b68669c4e42ed255568f79b1ac38601def9b6e70077cc47f9c6c3e5e

  • SSDEEP

    6144:EsNh3FiYgojSy1y454e4590y+GfqkP+dEkFj:EsNhViYgXP45Q59UVF

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      4c6501bff45504cf7e8f0e29dfc048c6a71a3c8ab89f44a6f2ee65b42d4d9e01N

    • Size

      278KB

    • MD5

      e73bfed3103c9c93dd1ed8a60541ef80

    • SHA1

      76e96cfbea3a10f02f9b70f57cbfb57745681c84

    • SHA256

      4c6501bff45504cf7e8f0e29dfc048c6a71a3c8ab89f44a6f2ee65b42d4d9e01

    • SHA512

      0c2c0ef2892f12ae2b9aee5c474995cb5c9b83e87bf988b4d361e6f5e28fad084807e067b68669c4e42ed255568f79b1ac38601def9b6e70077cc47f9c6c3e5e

    • SSDEEP

      6144:EsNh3FiYgojSy1y454e4590y+GfqkP+dEkFj:EsNhViYgXP45Q59UVF

MITRE ATT&CK Enterprise v15

Tasks