General

  • Target

    dff1c3d444576f4f0a1ef114c41ad934634c3f0a5fc94f925a3ed7caac4a6c46

  • Size

    205KB

  • Sample

    241113-hdc5cazpgk

  • MD5

    d9394dfc0d73164ac0134fe3e7f47cc0

  • SHA1

    9ed038f8c4224e444e26cf6442015452b24ec0d0

  • SHA256

    dff1c3d444576f4f0a1ef114c41ad934634c3f0a5fc94f925a3ed7caac4a6c46

  • SHA512

    b6aa785c02c4818a5cab67ffe848d2f60ca6a18ff363928634f381282803c28ea0dffac9975434765a89daba6f748f173c42735e1bba8076d99473e29110eda7

  • SSDEEP

    3072:S7VD4DUHnNZkfOP6sfIOpJ9C3hPlGxt1UhRkgyankTIzfwAYzWcXCyqT36zhRRKy:IzHnMLm5GNGxHUhtnkdpHqTKzhh8i

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      dff1c3d444576f4f0a1ef114c41ad934634c3f0a5fc94f925a3ed7caac4a6c46

    • Size

      205KB

    • MD5

      d9394dfc0d73164ac0134fe3e7f47cc0

    • SHA1

      9ed038f8c4224e444e26cf6442015452b24ec0d0

    • SHA256

      dff1c3d444576f4f0a1ef114c41ad934634c3f0a5fc94f925a3ed7caac4a6c46

    • SHA512

      b6aa785c02c4818a5cab67ffe848d2f60ca6a18ff363928634f381282803c28ea0dffac9975434765a89daba6f748f173c42735e1bba8076d99473e29110eda7

    • SSDEEP

      3072:S7VD4DUHnNZkfOP6sfIOpJ9C3hPlGxt1UhRkgyankTIzfwAYzWcXCyqT36zhRRKy:IzHnMLm5GNGxHUhtnkdpHqTKzhh8i

MITRE ATT&CK Enterprise v15

Tasks