General

  • Target

    77c1be20c1a1b06c41c6e4860c9eb40cf7ddbadc8bfb402794bd083cdf8db74bN.exe

  • Size

    218KB

  • Sample

    241128-frtcdawqct

  • MD5

    448527fe63825ac81f7d32ec1007a6c0

  • SHA1

    f8b058c560ce6c077e3620285474d650a4d3748e

  • SHA256

    77c1be20c1a1b06c41c6e4860c9eb40cf7ddbadc8bfb402794bd083cdf8db74b

  • SHA512

    65214792b75d8d4bfbd0a4adf523f8fb51682a2984788084995dca5ac71679e40829b5578e6fdad12b50140dabcfdd051d560a1f8749108ce87597868c617ac5

  • SSDEEP

    3072:uvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:w1SyAJp6rjn1gOObn4b6h9h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      77c1be20c1a1b06c41c6e4860c9eb40cf7ddbadc8bfb402794bd083cdf8db74bN.exe

    • Size

      218KB

    • MD5

      448527fe63825ac81f7d32ec1007a6c0

    • SHA1

      f8b058c560ce6c077e3620285474d650a4d3748e

    • SHA256

      77c1be20c1a1b06c41c6e4860c9eb40cf7ddbadc8bfb402794bd083cdf8db74b

    • SHA512

      65214792b75d8d4bfbd0a4adf523f8fb51682a2984788084995dca5ac71679e40829b5578e6fdad12b50140dabcfdd051d560a1f8749108ce87597868c617ac5

    • SSDEEP

      3072:uvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:w1SyAJp6rjn1gOObn4b6h9h

MITRE ATT&CK Enterprise v15

Tasks