General

  • Target

    fc659c6b8541f2c652c365b40ea05089d8ac30ece2251b69cd83089f80d09e07N.exe

  • Size

    259KB

  • Sample

    241201-e413ba1pgp

  • MD5

    f5e497a53bde455bbf5e5adab5384c60

  • SHA1

    3bb862b88d43072328d16f362fe0abbdfe6af99c

  • SHA256

    fc659c6b8541f2c652c365b40ea05089d8ac30ece2251b69cd83089f80d09e07

  • SHA512

    b77610914bf66afa5e9caf9e51c33309c7160f23a97f2ae6d632edba1beca24b0b6a48f434d3ec4cbc4eb8520dd5deed9f61308ab9b69b302d2d41bb35c16f96

  • SSDEEP

    6144:WyK4+vW9EnkxPWu9oYUkZYeLoerbZP4sdA9hmEPpW5rpH:5K99kPWqBU0LDrNgsdA9hFPW9

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      fc659c6b8541f2c652c365b40ea05089d8ac30ece2251b69cd83089f80d09e07N.exe

    • Size

      259KB

    • MD5

      f5e497a53bde455bbf5e5adab5384c60

    • SHA1

      3bb862b88d43072328d16f362fe0abbdfe6af99c

    • SHA256

      fc659c6b8541f2c652c365b40ea05089d8ac30ece2251b69cd83089f80d09e07

    • SHA512

      b77610914bf66afa5e9caf9e51c33309c7160f23a97f2ae6d632edba1beca24b0b6a48f434d3ec4cbc4eb8520dd5deed9f61308ab9b69b302d2d41bb35c16f96

    • SSDEEP

      6144:WyK4+vW9EnkxPWu9oYUkZYeLoerbZP4sdA9hmEPpW5rpH:5K99kPWqBU0LDrNgsdA9hFPW9

MITRE ATT&CK Enterprise v15

Tasks