General

  • Target

    9eb00ca8d1e67757535103cc0ac8bb1516b94f5d2943258ec0696e99a67162e3N.exe

  • Size

    358KB

  • Sample

    241129-3v1xysxmcl

  • MD5

    428ac935871f70207ea720ddfba37020

  • SHA1

    f3acd5afe51b0477d35d58770a3c08c5cd240055

  • SHA256

    9eb00ca8d1e67757535103cc0ac8bb1516b94f5d2943258ec0696e99a67162e3

  • SHA512

    fd461a3cc31e2519304b918f96b80b930cd9c37f9083b023bb3fcd02b208e6a41bc7adf933a56b1b5fa223a63c567fe0eeca54200c0290c69e1370df52bebb24

  • SSDEEP

    6144:HfRcmWhxR1arY/PbgmFOabPIIBhJXAv7eTY9suz0xhttGSrDKE3KIQvSka8bj:HamWTR1arYnEKosuzY34CZ3DQvSkN

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      9eb00ca8d1e67757535103cc0ac8bb1516b94f5d2943258ec0696e99a67162e3N.exe

    • Size

      358KB

    • MD5

      428ac935871f70207ea720ddfba37020

    • SHA1

      f3acd5afe51b0477d35d58770a3c08c5cd240055

    • SHA256

      9eb00ca8d1e67757535103cc0ac8bb1516b94f5d2943258ec0696e99a67162e3

    • SHA512

      fd461a3cc31e2519304b918f96b80b930cd9c37f9083b023bb3fcd02b208e6a41bc7adf933a56b1b5fa223a63c567fe0eeca54200c0290c69e1370df52bebb24

    • SSDEEP

      6144:HfRcmWhxR1arY/PbgmFOabPIIBhJXAv7eTY9suz0xhttGSrDKE3KIQvSka8bj:HamWTR1arYnEKosuzY34CZ3DQvSkN

MITRE ATT&CK Enterprise v15

Tasks