General

  • Target

    d39bde976bc16d8a1b98272b80ee0f45bc169cb014a0418a7d2da6c4c0400281N.exe

  • Size

    206KB

  • Sample

    241129-z59q3a1nfj

  • MD5

    b31c15782e5884493f92ecbcdb0b3210

  • SHA1

    a83d0145c745313f2a157510a5eb5be10f46c0c0

  • SHA256

    d39bde976bc16d8a1b98272b80ee0f45bc169cb014a0418a7d2da6c4c0400281

  • SHA512

    804b792a7f82935c4a47d9d6ad38859d4fe4876d65e45afcd5e3f29f3a9de622ae3125701056d28098b1023d0fec1d1e7a16849ac7d29530e3198340c6b3c865

  • SSDEEP

    6144:A+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6T+:A+U9qyFhJy56d/eoyXjn9W+

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      d39bde976bc16d8a1b98272b80ee0f45bc169cb014a0418a7d2da6c4c0400281N.exe

    • Size

      206KB

    • MD5

      b31c15782e5884493f92ecbcdb0b3210

    • SHA1

      a83d0145c745313f2a157510a5eb5be10f46c0c0

    • SHA256

      d39bde976bc16d8a1b98272b80ee0f45bc169cb014a0418a7d2da6c4c0400281

    • SHA512

      804b792a7f82935c4a47d9d6ad38859d4fe4876d65e45afcd5e3f29f3a9de622ae3125701056d28098b1023d0fec1d1e7a16849ac7d29530e3198340c6b3c865

    • SSDEEP

      6144:A+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6T+:A+U9qyFhJy56d/eoyXjn9W+

MITRE ATT&CK Enterprise v15

Tasks