General

  • Target

    57c0ee8e105fec7dad0ad028a3a1e4eecc69f0593875b83b4cb81dfab089fa70

  • Size

    217KB

  • Sample

    240920-yrywzavglj

  • MD5

    f9698c7341ce71713c5690a66b83aa45

  • SHA1

    726ee9dd69526984fd3d283304ba685b8211ad4d

  • SHA256

    57c0ee8e105fec7dad0ad028a3a1e4eecc69f0593875b83b4cb81dfab089fa70

  • SHA512

    76c1fddf37d08fcdc6fbd05c800ea1720fa8b3925c58f987ce0c3fb77fd3bc67d16ff24d6b8770a34c30319019fc8577bf95b7759890a5e8c37ad180f67098a8

  • SSDEEP

    6144:orRaTyDOnlo7eM+mlkWgRXOqobzWjozm2ulYM6Y:6sTbzu1glovW4EH6Y

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      57c0ee8e105fec7dad0ad028a3a1e4eecc69f0593875b83b4cb81dfab089fa70

    • Size

      217KB

    • MD5

      f9698c7341ce71713c5690a66b83aa45

    • SHA1

      726ee9dd69526984fd3d283304ba685b8211ad4d

    • SHA256

      57c0ee8e105fec7dad0ad028a3a1e4eecc69f0593875b83b4cb81dfab089fa70

    • SHA512

      76c1fddf37d08fcdc6fbd05c800ea1720fa8b3925c58f987ce0c3fb77fd3bc67d16ff24d6b8770a34c30319019fc8577bf95b7759890a5e8c37ad180f67098a8

    • SSDEEP

      6144:orRaTyDOnlo7eM+mlkWgRXOqobzWjozm2ulYM6Y:6sTbzu1glovW4EH6Y

MITRE ATT&CK Enterprise v15

Tasks