General

  • Target

    f49cbad54d34c94ad35d7f30c9fdc3d5ceb176a87931062fcc8611ae0b736a82.exe

  • Size

    259KB

  • Sample

    241127-l9f3nayrcx

  • MD5

    c5f86d53f6aefbbfb6b0dc5f93b7f72b

  • SHA1

    767bb6d24bd4b1314e1165920714936ee4e106da

  • SHA256

    f49cbad54d34c94ad35d7f30c9fdc3d5ceb176a87931062fcc8611ae0b736a82

  • SHA512

    2a8d943b2ed8b9187452e79303660c8a1fafec8f4ab53d783277b266e79f28fda8cc79ff66e9abe867f5bee9b0aef60c6a4cd55e7cd891a552ddd3502c0065bc

  • SSDEEP

    6144:WyK4+vW9EnkxPWu9oYUkZYeLoerbZP4sdA9hmEPpW5rpt:5K99kPWqBU0LDrNgsdA9hFPW/

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f49cbad54d34c94ad35d7f30c9fdc3d5ceb176a87931062fcc8611ae0b736a82.exe

    • Size

      259KB

    • MD5

      c5f86d53f6aefbbfb6b0dc5f93b7f72b

    • SHA1

      767bb6d24bd4b1314e1165920714936ee4e106da

    • SHA256

      f49cbad54d34c94ad35d7f30c9fdc3d5ceb176a87931062fcc8611ae0b736a82

    • SHA512

      2a8d943b2ed8b9187452e79303660c8a1fafec8f4ab53d783277b266e79f28fda8cc79ff66e9abe867f5bee9b0aef60c6a4cd55e7cd891a552ddd3502c0065bc

    • SSDEEP

      6144:WyK4+vW9EnkxPWu9oYUkZYeLoerbZP4sdA9hmEPpW5rpt:5K99kPWqBU0LDrNgsdA9hFPW/

MITRE ATT&CK Enterprise v15

Tasks