General

  • Target

    f2c96a82739708228bf232c502a9de175b48a0dfefccfe8319cf7f447e6f4f18N.exe

  • Size

    686KB

  • Sample

    241201-yykb6avpcp

  • MD5

    9bc5d7c519a966a8c9703e139baefd70

  • SHA1

    e525652aecad864f8dc9e0184eff926f7bc845f0

  • SHA256

    f2c96a82739708228bf232c502a9de175b48a0dfefccfe8319cf7f447e6f4f18

  • SHA512

    15c7626881817dc756345a200194bbd3db4ecc67b2b680e4052baf11ad00adf6c0308b108cc42f9a28cd170069cfd07a9b8abbf24eae47cdefc0d60007b9a3ed

  • SSDEEP

    12288:gmWhND9yJz+b1FcMLmp2ATTSsdApVHyGbs2CYPHrLpVmCbHDSgpH:gmUNJyJqb1FcMap2ATT5itjCYZ3DSoH

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      f2c96a82739708228bf232c502a9de175b48a0dfefccfe8319cf7f447e6f4f18N.exe

    • Size

      686KB

    • MD5

      9bc5d7c519a966a8c9703e139baefd70

    • SHA1

      e525652aecad864f8dc9e0184eff926f7bc845f0

    • SHA256

      f2c96a82739708228bf232c502a9de175b48a0dfefccfe8319cf7f447e6f4f18

    • SHA512

      15c7626881817dc756345a200194bbd3db4ecc67b2b680e4052baf11ad00adf6c0308b108cc42f9a28cd170069cfd07a9b8abbf24eae47cdefc0d60007b9a3ed

    • SSDEEP

      12288:gmWhND9yJz+b1FcMLmp2ATTSsdApVHyGbs2CYPHrLpVmCbHDSgpH:gmUNJyJqb1FcMap2ATT5itjCYZ3DSoH

MITRE ATT&CK Enterprise v15

Tasks