General

  • Target

    aacb057cb1b640f1a5d9762707e56545346aa3b2662f2b468241caf73cb37af4.exe

  • Size

    375KB

  • Sample

    241126-bh2j6swlew

  • MD5

    69fc60dbb55d496db0e59c01a8617969

  • SHA1

    0f09ea6a67936a6ead86ebeb9b70009792b6a2f7

  • SHA256

    aacb057cb1b640f1a5d9762707e56545346aa3b2662f2b468241caf73cb37af4

  • SHA512

    eef68b0952199b90ff5c7a36d9b89d29a01c6164d4a2cc7e11f7dda2cfeb8471d119e474b7ddff5abdf50bb74905b4b9f121c6be3fa623f05ff86294a521e5fb

  • SSDEEP

    6144:23EmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9Eis:BmWhND9yJz+b1FcMLmp2ATTSsds

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      aacb057cb1b640f1a5d9762707e56545346aa3b2662f2b468241caf73cb37af4.exe

    • Size

      375KB

    • MD5

      69fc60dbb55d496db0e59c01a8617969

    • SHA1

      0f09ea6a67936a6ead86ebeb9b70009792b6a2f7

    • SHA256

      aacb057cb1b640f1a5d9762707e56545346aa3b2662f2b468241caf73cb37af4

    • SHA512

      eef68b0952199b90ff5c7a36d9b89d29a01c6164d4a2cc7e11f7dda2cfeb8471d119e474b7ddff5abdf50bb74905b4b9f121c6be3fa623f05ff86294a521e5fb

    • SSDEEP

      6144:23EmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9Eis:BmWhND9yJz+b1FcMLmp2ATTSsds

MITRE ATT&CK Enterprise v15

Tasks