General

  • Target

    872d7a72f41cf5c16f29fad7820b0770b1b5bedf4c115380b2917b1b6ff00739N.exe

  • Size

    275KB

  • Sample

    241203-mbg3qs1kfw

  • MD5

    b33e643156f5e71468fe341eec569480

  • SHA1

    d998a4178a64757e5e7256164546d800a552d1d3

  • SHA256

    872d7a72f41cf5c16f29fad7820b0770b1b5bedf4c115380b2917b1b6ff00739

  • SHA512

    16af59af74a644973377bc811e1985e162011cf257158157c543179d38b4e528ea890fd3b03f6050162fdb4c580aeaf48d2b6a1e33b952758ae464819770f586

  • SSDEEP

    6144:l2J9n/ekxcnYvkGc9plVQYsvkk2EOqpJjSsTS:l2JUcX8LvVQY8kk2EO+d

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      872d7a72f41cf5c16f29fad7820b0770b1b5bedf4c115380b2917b1b6ff00739N.exe

    • Size

      275KB

    • MD5

      b33e643156f5e71468fe341eec569480

    • SHA1

      d998a4178a64757e5e7256164546d800a552d1d3

    • SHA256

      872d7a72f41cf5c16f29fad7820b0770b1b5bedf4c115380b2917b1b6ff00739

    • SHA512

      16af59af74a644973377bc811e1985e162011cf257158157c543179d38b4e528ea890fd3b03f6050162fdb4c580aeaf48d2b6a1e33b952758ae464819770f586

    • SSDEEP

      6144:l2J9n/ekxcnYvkGc9plVQYsvkk2EOqpJjSsTS:l2JUcX8LvVQY8kk2EO+d

MITRE ATT&CK Enterprise v15

Tasks