General

  • Target

    8aa3bc826c69ebb2d165db8f4d42426566b6addb7e7f80c0a36e34a9b685f4d9N.exe

  • Size

    218KB

  • Sample

    241117-3jvxkawjek

  • MD5

    b8c86ed962a8281dc05adf241d1d9430

  • SHA1

    20de3c479dd8c7ea5cbbab35955bbcfe6c0f7f0f

  • SHA256

    8aa3bc826c69ebb2d165db8f4d42426566b6addb7e7f80c0a36e34a9b685f4d9

  • SHA512

    b30f15456c5bc355df21f7f14559b45b6e23481c210bd9d6b6c6417a23e4d68b7407718a53817219c0655953f9765bd0e05751c642dfd3820cb9b898037798a1

  • SSDEEP

    3072:Tvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:L1SyAJp6rjn1gOObn4b6h9h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      8aa3bc826c69ebb2d165db8f4d42426566b6addb7e7f80c0a36e34a9b685f4d9N.exe

    • Size

      218KB

    • MD5

      b8c86ed962a8281dc05adf241d1d9430

    • SHA1

      20de3c479dd8c7ea5cbbab35955bbcfe6c0f7f0f

    • SHA256

      8aa3bc826c69ebb2d165db8f4d42426566b6addb7e7f80c0a36e34a9b685f4d9

    • SHA512

      b30f15456c5bc355df21f7f14559b45b6e23481c210bd9d6b6c6417a23e4d68b7407718a53817219c0655953f9765bd0e05751c642dfd3820cb9b898037798a1

    • SSDEEP

      3072:Tvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:L1SyAJp6rjn1gOObn4b6h9h

MITRE ATT&CK Enterprise v15

Tasks