General

  • Target

    045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33N.exe

  • Size

    245KB

  • Sample

    241126-1amtgsxkak

  • MD5

    3cea85c7ff571db5c593d0dab562d780

  • SHA1

    3bb5a8d58e2a0c88f8c08855c42e4ad2a412681e

  • SHA256

    045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33

  • SHA512

    77e26bab30f7bfee8dfaeb5cd9bc84b697c5f4f75233cba3be1b78dd021e9f3ba8f2c4a192d2e78e8cbdee5d8f367ed31225461e2348b9f61d09295f97f02b8f

  • SSDEEP

    6144:CVtMbjk4c/T0KJ8I1y507VY/eQ3AxaXDIutfY0:C/KjkRtqI1Y07VY/zQ8htA0

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33N.exe

    • Size

      245KB

    • MD5

      3cea85c7ff571db5c593d0dab562d780

    • SHA1

      3bb5a8d58e2a0c88f8c08855c42e4ad2a412681e

    • SHA256

      045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33

    • SHA512

      77e26bab30f7bfee8dfaeb5cd9bc84b697c5f4f75233cba3be1b78dd021e9f3ba8f2c4a192d2e78e8cbdee5d8f367ed31225461e2348b9f61d09295f97f02b8f

    • SSDEEP

      6144:CVtMbjk4c/T0KJ8I1y507VY/eQ3AxaXDIutfY0:C/KjkRtqI1Y07VY/zQ8htA0

MITRE ATT&CK Enterprise v15

Tasks