General

  • Target

    ff03b0e46c9b1672bc761f8f761d0f74e678a9b60eb2bae762213a33aa1e58fbN

  • Size

    208KB

  • Sample

    241106-e15w4atnfs

  • MD5

    a82b20470d488e0b868a1f61e27a57f0

  • SHA1

    0e8626114074d99af8a59275e15c3a19c60e7087

  • SHA256

    ff03b0e46c9b1672bc761f8f761d0f74e678a9b60eb2bae762213a33aa1e58fb

  • SHA512

    7225160a549a731355b67deabbf1bd50ea74c7c194855b0b6a8bb301b94763f6422947ae947efc0af3fffbd55594f27cfbddec15c9c30d21226b39a3f5b46ac8

  • SSDEEP

    6144:Ea1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfk:EbapK0JCmRcU9vVokf

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      ff03b0e46c9b1672bc761f8f761d0f74e678a9b60eb2bae762213a33aa1e58fbN

    • Size

      208KB

    • MD5

      a82b20470d488e0b868a1f61e27a57f0

    • SHA1

      0e8626114074d99af8a59275e15c3a19c60e7087

    • SHA256

      ff03b0e46c9b1672bc761f8f761d0f74e678a9b60eb2bae762213a33aa1e58fb

    • SHA512

      7225160a549a731355b67deabbf1bd50ea74c7c194855b0b6a8bb301b94763f6422947ae947efc0af3fffbd55594f27cfbddec15c9c30d21226b39a3f5b46ac8

    • SSDEEP

      6144:Ea1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfk:EbapK0JCmRcU9vVokf

MITRE ATT&CK Enterprise v15

Tasks