General

  • Target

    385432d1dfc56534afe68c1c388531272ac84485106a68ac09ce65595ce4f2a2N

  • Size

    208KB

  • Sample

    241109-asac1asmfx

  • MD5

    9ef3058659e38bce3783f2f1e1938950

  • SHA1

    be4dded65a144c652b41dbe3b77716258e225b95

  • SHA256

    385432d1dfc56534afe68c1c388531272ac84485106a68ac09ce65595ce4f2a2

  • SHA512

    3646ce3a61f276c68bc14ff44c4553dee89f28cd395e211f5febd66c96270db3dab852393a1c710571890d3db6b8dcd19ddcc0043fca7b27f577f1b5f138d7b1

  • SSDEEP

    6144:6a1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfk:6bapK0JCmRcU9vVokf

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      385432d1dfc56534afe68c1c388531272ac84485106a68ac09ce65595ce4f2a2N

    • Size

      208KB

    • MD5

      9ef3058659e38bce3783f2f1e1938950

    • SHA1

      be4dded65a144c652b41dbe3b77716258e225b95

    • SHA256

      385432d1dfc56534afe68c1c388531272ac84485106a68ac09ce65595ce4f2a2

    • SHA512

      3646ce3a61f276c68bc14ff44c4553dee89f28cd395e211f5febd66c96270db3dab852393a1c710571890d3db6b8dcd19ddcc0043fca7b27f577f1b5f138d7b1

    • SSDEEP

      6144:6a1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfk:6bapK0JCmRcU9vVokf

MITRE ATT&CK Enterprise v15

Tasks