General

  • Target

    a826b7ff08c2244f28a53e5266f566272af32569991ff6084eaba507de4dfa77N

  • Size

    1.0MB

  • Sample

    241105-2f53pa1bkk

  • MD5

    621d76ac8647f26e0af0206c4ddd2440

  • SHA1

    67dac8bd12e032f419b6bcf4a625d6643a4393d8

  • SHA256

    a826b7ff08c2244f28a53e5266f566272af32569991ff6084eaba507de4dfa77

  • SHA512

    e3ebde761c2f0df41eb28d36ac8ff0ab45597097ad788bbc5a5e1ed894ac01ca73a5f5fb8b738816dfde824c835822e748eb8b9b678d95125132236d38c38c45

  • SSDEEP

    24576:5mUNJyJqb1FcMap2ATT5OmUNJyJqb1FcMap2ATT5OmUNJyJqb1FcMap2ATT58:5mV2ApOmV2ApOmV2Ap8

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      a826b7ff08c2244f28a53e5266f566272af32569991ff6084eaba507de4dfa77N

    • Size

      1.0MB

    • MD5

      621d76ac8647f26e0af0206c4ddd2440

    • SHA1

      67dac8bd12e032f419b6bcf4a625d6643a4393d8

    • SHA256

      a826b7ff08c2244f28a53e5266f566272af32569991ff6084eaba507de4dfa77

    • SHA512

      e3ebde761c2f0df41eb28d36ac8ff0ab45597097ad788bbc5a5e1ed894ac01ca73a5f5fb8b738816dfde824c835822e748eb8b9b678d95125132236d38c38c45

    • SSDEEP

      24576:5mUNJyJqb1FcMap2ATT5OmUNJyJqb1FcMap2ATT5OmUNJyJqb1FcMap2ATT58:5mV2ApOmV2ApOmV2Ap8

MITRE ATT&CK Enterprise v15

Tasks