General

  • Target

    e18af43add9ee2e1d5722af6b1a5ecc36e25757074137c50f062c8a4251ee71e.exe

  • Size

    355KB

  • Sample

    241124-q53hbaslgx

  • MD5

    da816f2170660c83e6e3f96b8bbfb040

  • SHA1

    283427ef4e743071a1ea177a715bacb9ef46061f

  • SHA256

    e18af43add9ee2e1d5722af6b1a5ecc36e25757074137c50f062c8a4251ee71e

  • SHA512

    3634a6412d618efafd87403c1c2a9ce8d0918886112bfb545fbdfa02dac0045b16432dec37ee377858aa3a3ea2b2969cb37548828eede73a76c8cb60a5fde922

  • SSDEEP

    6144:VgEmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9Eid:TmWhND9yJz+b1FcMLmp2ATTSsdd

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      e18af43add9ee2e1d5722af6b1a5ecc36e25757074137c50f062c8a4251ee71e.exe

    • Size

      355KB

    • MD5

      da816f2170660c83e6e3f96b8bbfb040

    • SHA1

      283427ef4e743071a1ea177a715bacb9ef46061f

    • SHA256

      e18af43add9ee2e1d5722af6b1a5ecc36e25757074137c50f062c8a4251ee71e

    • SHA512

      3634a6412d618efafd87403c1c2a9ce8d0918886112bfb545fbdfa02dac0045b16432dec37ee377858aa3a3ea2b2969cb37548828eede73a76c8cb60a5fde922

    • SSDEEP

      6144:VgEmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9Eid:TmWhND9yJz+b1FcMLmp2ATTSsdd

MITRE ATT&CK Enterprise v15

Tasks