General

  • Target

    7c2560d27ba7db46f7336c3c2c5f5585b35e2378984eef77ef7de209c5a39b7aN

  • Size

    355KB

  • Sample

    241109-h52l1szglp

  • MD5

    571e61844fc14ad4b7119b7b8d7f6e40

  • SHA1

    5179a197b3c43e263b6fb287fa18899dcb805e7f

  • SHA256

    7c2560d27ba7db46f7336c3c2c5f5585b35e2378984eef77ef7de209c5a39b7a

  • SHA512

    cc3d7287fcc4d9ed87785d6b22e2999c3ba02f28e5abcdb0919ba22f745a8f51a5ed5cd7144d3cad8ca1a180c21c00a7ec9815997fca3dbb648226eba1fc41ce

  • SSDEEP

    6144:73EmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9EiS:YmWhND9yJz+b1FcMLmp2ATTSsdS

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      7c2560d27ba7db46f7336c3c2c5f5585b35e2378984eef77ef7de209c5a39b7aN

    • Size

      355KB

    • MD5

      571e61844fc14ad4b7119b7b8d7f6e40

    • SHA1

      5179a197b3c43e263b6fb287fa18899dcb805e7f

    • SHA256

      7c2560d27ba7db46f7336c3c2c5f5585b35e2378984eef77ef7de209c5a39b7a

    • SHA512

      cc3d7287fcc4d9ed87785d6b22e2999c3ba02f28e5abcdb0919ba22f745a8f51a5ed5cd7144d3cad8ca1a180c21c00a7ec9815997fca3dbb648226eba1fc41ce

    • SSDEEP

      6144:73EmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9EiS:YmWhND9yJz+b1FcMLmp2ATTSsdS

MITRE ATT&CK Enterprise v15

Tasks