General

  • Target

    b043e3e0d2f9b4879ebfb607d583d1554da7cd4b1c5cb1aa788d82df37c0694eN.exe

  • Size

    686KB

  • Sample

    241122-rh7zysyjaj

  • MD5

    c6058ed5ad3a9550c18b8c76ca5d0500

  • SHA1

    1467597b0fd28ee307fdc935d27f4d4f7cf6fa93

  • SHA256

    b043e3e0d2f9b4879ebfb607d583d1554da7cd4b1c5cb1aa788d82df37c0694e

  • SHA512

    1fa810c344a592853f4adc1a10d34684f90b6bfb21343ec56a1c77b50df427d3f2cb40f66a921a649a4b8a9e35e40486c1ae4fbd448ea69b9d189189b5953639

  • SSDEEP

    12288:7mWhND9yJz+b1FcMLmp2ATTSsdApVHyGbs2CYPHrLpVmCbHDSgp:7mUNJyJqb1FcMap2ATT5itjCYZ3DSo

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      b043e3e0d2f9b4879ebfb607d583d1554da7cd4b1c5cb1aa788d82df37c0694eN.exe

    • Size

      686KB

    • MD5

      c6058ed5ad3a9550c18b8c76ca5d0500

    • SHA1

      1467597b0fd28ee307fdc935d27f4d4f7cf6fa93

    • SHA256

      b043e3e0d2f9b4879ebfb607d583d1554da7cd4b1c5cb1aa788d82df37c0694e

    • SHA512

      1fa810c344a592853f4adc1a10d34684f90b6bfb21343ec56a1c77b50df427d3f2cb40f66a921a649a4b8a9e35e40486c1ae4fbd448ea69b9d189189b5953639

    • SSDEEP

      12288:7mWhND9yJz+b1FcMLmp2ATTSsdApVHyGbs2CYPHrLpVmCbHDSgp:7mUNJyJqb1FcMap2ATT5itjCYZ3DSo

MITRE ATT&CK Enterprise v15

Tasks