General

  • Target

    90ab0a015e142e0e4953ff0302a1fe406496b6798d0ab6856535c4fd9bf55ceaN

  • Size

    218KB

  • Sample

    240927-jzvf7asgjr

  • MD5

    c9296e4568ca2809c7d3d86b13f25f70

  • SHA1

    a1d101a3dcfa421c63518820815105f31deb679c

  • SHA256

    90ab0a015e142e0e4953ff0302a1fe406496b6798d0ab6856535c4fd9bf55cea

  • SHA512

    e292b3afa70d5315a9646e6c4053224152e3b58020747ea16b0801c436b9a611f9521ded4b2f60b59904686e8d8be0a7ce6bd0102900dec0fd331d7b2def2183

  • SSDEEP

    3072:Avm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:u1SyAJp6rjn1gOObn4b6h9h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      90ab0a015e142e0e4953ff0302a1fe406496b6798d0ab6856535c4fd9bf55ceaN

    • Size

      218KB

    • MD5

      c9296e4568ca2809c7d3d86b13f25f70

    • SHA1

      a1d101a3dcfa421c63518820815105f31deb679c

    • SHA256

      90ab0a015e142e0e4953ff0302a1fe406496b6798d0ab6856535c4fd9bf55cea

    • SHA512

      e292b3afa70d5315a9646e6c4053224152e3b58020747ea16b0801c436b9a611f9521ded4b2f60b59904686e8d8be0a7ce6bd0102900dec0fd331d7b2def2183

    • SSDEEP

      3072:Avm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:u1SyAJp6rjn1gOObn4b6h9h

MITRE ATT&CK Enterprise v15

Tasks