General

  • Target

    5bf4c1aabf4f6ac6e57dbfcbeac56936c6b8488e7aed9c91c8ec8bc2aca9caf8.exe

  • Size

    218KB

  • Sample

    241203-n6erjavjbt

  • MD5

    08a1a3882d1d36c728c9f0f9c9e72e5e

  • SHA1

    32cfd24da914b975803e986b28797b43ff17e156

  • SHA256

    5bf4c1aabf4f6ac6e57dbfcbeac56936c6b8488e7aed9c91c8ec8bc2aca9caf8

  • SHA512

    f005290d3e5c554b94f037dad37a5c75e7b793abbbadfd785128eae266a704bccbc78bf235ddaa388df58bf224e83e8275cf550e072f0724216d81b45e524135

  • SSDEEP

    3072:pvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2He:91SyAJp6rjn1gOObn4b6h9j

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      5bf4c1aabf4f6ac6e57dbfcbeac56936c6b8488e7aed9c91c8ec8bc2aca9caf8.exe

    • Size

      218KB

    • MD5

      08a1a3882d1d36c728c9f0f9c9e72e5e

    • SHA1

      32cfd24da914b975803e986b28797b43ff17e156

    • SHA256

      5bf4c1aabf4f6ac6e57dbfcbeac56936c6b8488e7aed9c91c8ec8bc2aca9caf8

    • SHA512

      f005290d3e5c554b94f037dad37a5c75e7b793abbbadfd785128eae266a704bccbc78bf235ddaa388df58bf224e83e8275cf550e072f0724216d81b45e524135

    • SSDEEP

      3072:pvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2He:91SyAJp6rjn1gOObn4b6h9j

MITRE ATT&CK Enterprise v15

Tasks