General

  • Target

    cd4bd61779a0aa8c6d7070adcc87766fdf686c23a0892d8fb4435859bf3c54d1

  • Size

    1.0MB

  • Sample

    241114-c7e8xatcrc

  • MD5

    35ef3b8859dfd42df36c3e1b484b0ab8

  • SHA1

    0801d1cebb3af0d0d52a26f0a1001557a936202c

  • SHA256

    cd4bd61779a0aa8c6d7070adcc87766fdf686c23a0892d8fb4435859bf3c54d1

  • SHA512

    3e55d721392ac37dd005fc8b52a1f375cd13e5fed97d50a0446ebe74149a834b11ad4bbdfb847ddcd77f142e8d71157f9db1b4624023d955b822a07007e263c8

  • SSDEEP

    24576:WmUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT58:WmV2ApemV2ApemV2Ap8

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      cd4bd61779a0aa8c6d7070adcc87766fdf686c23a0892d8fb4435859bf3c54d1

    • Size

      1.0MB

    • MD5

      35ef3b8859dfd42df36c3e1b484b0ab8

    • SHA1

      0801d1cebb3af0d0d52a26f0a1001557a936202c

    • SHA256

      cd4bd61779a0aa8c6d7070adcc87766fdf686c23a0892d8fb4435859bf3c54d1

    • SHA512

      3e55d721392ac37dd005fc8b52a1f375cd13e5fed97d50a0446ebe74149a834b11ad4bbdfb847ddcd77f142e8d71157f9db1b4624023d955b822a07007e263c8

    • SSDEEP

      24576:WmUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT58:WmV2ApemV2ApemV2Ap8

MITRE ATT&CK Enterprise v15

Tasks