General

  • Target

    3153c10169dc8f8874248d925ea9e5341e5364b10cc9eaf88e97fbc8a264ac13.exe

  • Size

    204KB

  • Sample

    241203-31stja1maw

  • MD5

    1ad27b500b59ea4a8f428d5115a2365a

  • SHA1

    3c106a1fd95a386cf9a32b3af8c31d5767de774b

  • SHA256

    3153c10169dc8f8874248d925ea9e5341e5364b10cc9eaf88e97fbc8a264ac13

  • SHA512

    09b5db4f3dbed873e857468b0942360b6da8f74d6981c256aa0d266887ddfb2a14b316b8da1b7b2adcdc6b2d4590ccd0430fdeaea484f1e723d9f25acf6e9bd7

  • SSDEEP

    3072:LdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUc:5GazIc6TVBMrOpzeJEsuirSGEMpgEk

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      3153c10169dc8f8874248d925ea9e5341e5364b10cc9eaf88e97fbc8a264ac13.exe

    • Size

      204KB

    • MD5

      1ad27b500b59ea4a8f428d5115a2365a

    • SHA1

      3c106a1fd95a386cf9a32b3af8c31d5767de774b

    • SHA256

      3153c10169dc8f8874248d925ea9e5341e5364b10cc9eaf88e97fbc8a264ac13

    • SHA512

      09b5db4f3dbed873e857468b0942360b6da8f74d6981c256aa0d266887ddfb2a14b316b8da1b7b2adcdc6b2d4590ccd0430fdeaea484f1e723d9f25acf6e9bd7

    • SSDEEP

      3072:LdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUc:5GazIc6TVBMrOpzeJEsuirSGEMpgEk

MITRE ATT&CK Enterprise v15

Tasks