General

  • Target

    3012-2-0x0000000000400000-0x000000000045C000-memory.dmp

  • Size

    368KB

  • Sample

    241111-vr78vsvrak

  • MD5

    534f6489a8a6ebde9a96b0d19c0afe25

  • SHA1

    4e0145d743bff4ef5b2b4dca80016a471b128643

  • SHA256

    70691626279151f197cfdccab8443143a663e18ad4c993c0366b2fbee1663dbd

  • SHA512

    f6f7f5c873b5c44c2349be9c83b7ee5a49a28f28cabad5458df839292b0fbbdc95a63e0e0b1a339de807ccc8c397dacdeb16d288a0d781885dc25813bdcee610

  • SSDEEP

    6144:wDCmWoza0a1IMVVEb3uqRpwIUV9lMYmFQqZRRphLuVucfb8ehbjN8wS21bKRTw4W:JmWQa0a1IMVr9eMqbRzLuVucfb8ehbjX

Score
10/10

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      3012-2-0x0000000000400000-0x000000000045C000-memory.dmp

    • Size

      368KB

    • MD5

      534f6489a8a6ebde9a96b0d19c0afe25

    • SHA1

      4e0145d743bff4ef5b2b4dca80016a471b128643

    • SHA256

      70691626279151f197cfdccab8443143a663e18ad4c993c0366b2fbee1663dbd

    • SHA512

      f6f7f5c873b5c44c2349be9c83b7ee5a49a28f28cabad5458df839292b0fbbdc95a63e0e0b1a339de807ccc8c397dacdeb16d288a0d781885dc25813bdcee610

    • SSDEEP

      6144:wDCmWoza0a1IMVVEb3uqRpwIUV9lMYmFQqZRRphLuVucfb8ehbjN8wS21bKRTw4W:JmWQa0a1IMVr9eMqbRzLuVucfb8ehbjX

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks