General

  • Target

    9f192763f3fad8f3f9944bd7d29824f5c6319dc1adf15036019fd33783bb898eN

  • Size

    209KB

  • Sample

    241105-k4x9baybkh

  • MD5

    bb18d7f28135589c7f56e54e76dc3130

  • SHA1

    0ae95b21242486b866fd986d7c5608330ba8e2c0

  • SHA256

    9f192763f3fad8f3f9944bd7d29824f5c6319dc1adf15036019fd33783bb898e

  • SHA512

    fb964de784866fa6042aade0a25514bcc184b2103a17eb5a86904d76c165e34f986e1cc8060486fce8fd4c400d0fdc3d4f4dfaeab8d4e4ad9f9a6d621fc2f4f1

  • SSDEEP

    3072:GEdOQzZnx6OJPa0UVKS1DNB4jQVckmFP5GTBiRw0OZ9pB05OZalrl7Sy+uwY4d:PzZnx68OKSOjQ7m+TUWzpm5aSxTXw

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      9f192763f3fad8f3f9944bd7d29824f5c6319dc1adf15036019fd33783bb898eN

    • Size

      209KB

    • MD5

      bb18d7f28135589c7f56e54e76dc3130

    • SHA1

      0ae95b21242486b866fd986d7c5608330ba8e2c0

    • SHA256

      9f192763f3fad8f3f9944bd7d29824f5c6319dc1adf15036019fd33783bb898e

    • SHA512

      fb964de784866fa6042aade0a25514bcc184b2103a17eb5a86904d76c165e34f986e1cc8060486fce8fd4c400d0fdc3d4f4dfaeab8d4e4ad9f9a6d621fc2f4f1

    • SSDEEP

      3072:GEdOQzZnx6OJPa0UVKS1DNB4jQVckmFP5GTBiRw0OZ9pB05OZalrl7Sy+uwY4d:PzZnx68OKSOjQ7m+TUWzpm5aSxTXw

MITRE ATT&CK Enterprise v15

Tasks