General

  • Target

    fb298a3e9e9286a2489b015abd5d2ebfcddab5e94d4e89cc2f9e3a97b9738c23

  • Size

    260KB

  • Sample

    241029-h38ybavnaz

  • MD5

    95bb1fe8c2e695b5543efd5d34da3d55

  • SHA1

    3c80995dca2841157a8996a87c378249411343c6

  • SHA256

    fb298a3e9e9286a2489b015abd5d2ebfcddab5e94d4e89cc2f9e3a97b9738c23

  • SHA512

    43c12522076093e2053a742d201cfea21fc6743f52f049d8ba7946c840dced5d7702b8d8d96bcc76abf979b7a2e02c05d6616a577efb5c00542f14238df9d796

  • SSDEEP

    6144:gq95wwCZpN4qupLyZ1RsJZ/29JnzotPtrZeCoQNAdRDR/d:gqowCd4kS3ejzSeCdCJRd

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      fb298a3e9e9286a2489b015abd5d2ebfcddab5e94d4e89cc2f9e3a97b9738c23

    • Size

      260KB

    • MD5

      95bb1fe8c2e695b5543efd5d34da3d55

    • SHA1

      3c80995dca2841157a8996a87c378249411343c6

    • SHA256

      fb298a3e9e9286a2489b015abd5d2ebfcddab5e94d4e89cc2f9e3a97b9738c23

    • SHA512

      43c12522076093e2053a742d201cfea21fc6743f52f049d8ba7946c840dced5d7702b8d8d96bcc76abf979b7a2e02c05d6616a577efb5c00542f14238df9d796

    • SSDEEP

      6144:gq95wwCZpN4qupLyZ1RsJZ/29JnzotPtrZeCoQNAdRDR/d:gqowCd4kS3ejzSeCdCJRd

MITRE ATT&CK Enterprise v15

Tasks