General

  • Target

    3f6ba4976fcc22e338ad4b96fe4270f82656d2a45d27479c6db5eb6abbb4d8d0N

  • Size

    260KB

  • Sample

    240928-r6nwzstflf

  • MD5

    f20b370a3f50a6580ab9f8743fa35e00

  • SHA1

    4e04275d8248ab112eba21ac7dff54196de4a961

  • SHA256

    3f6ba4976fcc22e338ad4b96fe4270f82656d2a45d27479c6db5eb6abbb4d8d0

  • SHA512

    9affacff8c75ce8e096084f493767750a20d7511c2e3f25eeed2951e54c4a1eddbc66455a693da569f60f055a8bd82ea9be4e0cca788be9d1b33a56ea32c8c66

  • SSDEEP

    6144:xFAqgNMrMNnHGUS0mATGBqxwO54kBzPpSC5T0i8S:vUNKMQUzSwh5bBzseT0m

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      3f6ba4976fcc22e338ad4b96fe4270f82656d2a45d27479c6db5eb6abbb4d8d0N

    • Size

      260KB

    • MD5

      f20b370a3f50a6580ab9f8743fa35e00

    • SHA1

      4e04275d8248ab112eba21ac7dff54196de4a961

    • SHA256

      3f6ba4976fcc22e338ad4b96fe4270f82656d2a45d27479c6db5eb6abbb4d8d0

    • SHA512

      9affacff8c75ce8e096084f493767750a20d7511c2e3f25eeed2951e54c4a1eddbc66455a693da569f60f055a8bd82ea9be4e0cca788be9d1b33a56ea32c8c66

    • SSDEEP

      6144:xFAqgNMrMNnHGUS0mATGBqxwO54kBzPpSC5T0i8S:vUNKMQUzSwh5bBzseT0m

MITRE ATT&CK Enterprise v15

Tasks