General

  • Target

    c0443d8adbb48dc0beb2bb2f57eac24e21e756937835888504b79bb0c982f600N

  • Size

    205KB

  • Sample

    240921-24381azalb

  • MD5

    4af0e82bbef9aee8bd8253c9a731e730

  • SHA1

    e4572937012c40e580011507577be93a65fd737a

  • SHA256

    c0443d8adbb48dc0beb2bb2f57eac24e21e756937835888504b79bb0c982f600

  • SHA512

    bf7770354bc2f23fc5c0b56a542c8dba316bb2592118f215cb69ab1d4f1c341fca0835d9df1693112a23fec9738ee29188081a2634a8ae06a0a68eace2a56058

  • SSDEEP

    3072:Q7VD4DUHnNZkfOP6sfIOpJ9C3hPlGxt1UhRkgyankTIzfwAYzWcXCyqT36zhRRKy:GzHnMLm5GNGxHUhtnkdpHqTKzhh8i

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      c0443d8adbb48dc0beb2bb2f57eac24e21e756937835888504b79bb0c982f600N

    • Size

      205KB

    • MD5

      4af0e82bbef9aee8bd8253c9a731e730

    • SHA1

      e4572937012c40e580011507577be93a65fd737a

    • SHA256

      c0443d8adbb48dc0beb2bb2f57eac24e21e756937835888504b79bb0c982f600

    • SHA512

      bf7770354bc2f23fc5c0b56a542c8dba316bb2592118f215cb69ab1d4f1c341fca0835d9df1693112a23fec9738ee29188081a2634a8ae06a0a68eace2a56058

    • SSDEEP

      3072:Q7VD4DUHnNZkfOP6sfIOpJ9C3hPlGxt1UhRkgyankTIzfwAYzWcXCyqT36zhRRKy:GzHnMLm5GNGxHUhtnkdpHqTKzhh8i

MITRE ATT&CK Enterprise v15

Tasks