General

  • Target

    d56bd415ae2cc3d890580a2e871892d92aa784869c4613647733d8ce4a5fc753

  • Size

    305KB

  • Sample

    241104-fvy22avfkk

  • MD5

    84f5bdf0c1f4727a2068d34d220783e9

  • SHA1

    adde07173b465f1db9b7d7f68a3adffeceae5d55

  • SHA256

    d56bd415ae2cc3d890580a2e871892d92aa784869c4613647733d8ce4a5fc753

  • SHA512

    96ebb9c982b82f1b200c068dfea44ab82379447cd60a1f5a0a53c259130fcdf2c1587608146b2b4d10235d4a88ad73b65279bd73b6bb50d641e09c6a22125f37

  • SSDEEP

    6144:v2uO84xcMVRUS8Zbj5wJQkNt2zwBAaxJ8bXZQYcHJ:+RJIdlwJ9HmhrZiHJ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d56bd415ae2cc3d890580a2e871892d92aa784869c4613647733d8ce4a5fc753

    • Size

      305KB

    • MD5

      84f5bdf0c1f4727a2068d34d220783e9

    • SHA1

      adde07173b465f1db9b7d7f68a3adffeceae5d55

    • SHA256

      d56bd415ae2cc3d890580a2e871892d92aa784869c4613647733d8ce4a5fc753

    • SHA512

      96ebb9c982b82f1b200c068dfea44ab82379447cd60a1f5a0a53c259130fcdf2c1587608146b2b4d10235d4a88ad73b65279bd73b6bb50d641e09c6a22125f37

    • SSDEEP

      6144:v2uO84xcMVRUS8Zbj5wJQkNt2zwBAaxJ8bXZQYcHJ:+RJIdlwJ9HmhrZiHJ

MITRE ATT&CK Enterprise v15

Tasks