General

  • Target

    96f403bb3d62e3c2ca5fc1e10a3bf12ce9883cb0380d46db4982fc3f6389dc62.exe

  • Size

    206KB

  • Sample

    241111-v621dssepj

  • MD5

    3754378dbaf17b59ba18b169af7294f9

  • SHA1

    21067e296db52a648f694251d530c6eea28c0f3b

  • SHA256

    96f403bb3d62e3c2ca5fc1e10a3bf12ce9883cb0380d46db4982fc3f6389dc62

  • SHA512

    4fbea68eb9260858395810b467687c92fd96d954ab5e67458d00bfc17dccf7b0c52cc46199b7402fda9f70df302bbdc4d487968ea2343825962771640645a533

  • SSDEEP

    6144:8+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6TO:8+U9qyFhJy56d/eoyXjn9WO

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      96f403bb3d62e3c2ca5fc1e10a3bf12ce9883cb0380d46db4982fc3f6389dc62.exe

    • Size

      206KB

    • MD5

      3754378dbaf17b59ba18b169af7294f9

    • SHA1

      21067e296db52a648f694251d530c6eea28c0f3b

    • SHA256

      96f403bb3d62e3c2ca5fc1e10a3bf12ce9883cb0380d46db4982fc3f6389dc62

    • SHA512

      4fbea68eb9260858395810b467687c92fd96d954ab5e67458d00bfc17dccf7b0c52cc46199b7402fda9f70df302bbdc4d487968ea2343825962771640645a533

    • SSDEEP

      6144:8+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6TO:8+U9qyFhJy56d/eoyXjn9WO

MITRE ATT&CK Enterprise v15

Tasks