General

  • Target

    3a0a923dc852c9df8c37ad5fb9279beb476e930c3039f3e994fd8cfdec56ecaa.exe

  • Size

    208KB

  • Sample

    241117-ybp9ws1qdn

  • MD5

    06af3052fd1f38f687cc0cd8f714ee39

  • SHA1

    5b6a6ba89ed9992bb5b14ba8d6d03739eae0c301

  • SHA256

    3a0a923dc852c9df8c37ad5fb9279beb476e930c3039f3e994fd8cfdec56ecaa

  • SHA512

    610f954fb860a2cf7bc162c42a211c962bcdcc4a09f06ea633efc87b0014064548e78b257b7c552e70ee48fd447adba2ae58c41a5312c7e4f215a4ac11ce56e3

  • SSDEEP

    6144:CZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:AquCuygMQjd5vJIBP1p

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      3a0a923dc852c9df8c37ad5fb9279beb476e930c3039f3e994fd8cfdec56ecaa.exe

    • Size

      208KB

    • MD5

      06af3052fd1f38f687cc0cd8f714ee39

    • SHA1

      5b6a6ba89ed9992bb5b14ba8d6d03739eae0c301

    • SHA256

      3a0a923dc852c9df8c37ad5fb9279beb476e930c3039f3e994fd8cfdec56ecaa

    • SHA512

      610f954fb860a2cf7bc162c42a211c962bcdcc4a09f06ea633efc87b0014064548e78b257b7c552e70ee48fd447adba2ae58c41a5312c7e4f215a4ac11ce56e3

    • SSDEEP

      6144:CZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:AquCuygMQjd5vJIBP1p

MITRE ATT&CK Enterprise v15

Tasks