General

  • Target

    6aeb730a2a5367d704c24584d934ebb0d1e20961a9cd36e824d53543b29492fa

  • Size

    314KB

  • Sample

    241124-3rallaskem

  • MD5

    485cf8433f01abf7b65567ff190fd6a9

  • SHA1

    3ba64f13ba405462266af843c561fcc42a838907

  • SHA256

    6aeb730a2a5367d704c24584d934ebb0d1e20961a9cd36e824d53543b29492fa

  • SHA512

    c947b0491b98797e932e4a2a4ca31a906f8a3fb4e667c61c5c163d38112333a5f19c31b0e21412b1fea308a4e06f865b743b80b018037e085933e99dcad2f593

  • SSDEEP

    6144:UzEvGwudUE7eTxBdX429/W3gcMPa5rwD6V9/B27gj/dCQrEyb:UgOVqE7Cx7I29/WQcMYMyH2q/rb

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      6aeb730a2a5367d704c24584d934ebb0d1e20961a9cd36e824d53543b29492fa

    • Size

      314KB

    • MD5

      485cf8433f01abf7b65567ff190fd6a9

    • SHA1

      3ba64f13ba405462266af843c561fcc42a838907

    • SHA256

      6aeb730a2a5367d704c24584d934ebb0d1e20961a9cd36e824d53543b29492fa

    • SHA512

      c947b0491b98797e932e4a2a4ca31a906f8a3fb4e667c61c5c163d38112333a5f19c31b0e21412b1fea308a4e06f865b743b80b018037e085933e99dcad2f593

    • SSDEEP

      6144:UzEvGwudUE7eTxBdX429/W3gcMPa5rwD6V9/B27gj/dCQrEyb:UgOVqE7Cx7I29/WQcMYMyH2q/rb

MITRE ATT&CK Enterprise v15

Tasks