General

  • Target

    2dac17fbb595d3a55a512acdf7283517b758e7db6e7ddb7c72544d7ecae472d5N.exe

  • Size

    204KB

  • Sample

    241203-ns13lstmgz

  • MD5

    93572eb9a4a52732b8970bc377135590

  • SHA1

    888d5a6b0fa0a1d18fa2fd1a8251af3f4e3054c3

  • SHA256

    2dac17fbb595d3a55a512acdf7283517b758e7db6e7ddb7c72544d7ecae472d5

  • SHA512

    63e10e17bca0b731e6fab200628ba46fafc9914ad6174a9a79d63a6cd1cbca522f0394878a341caa18f5cbd2d923afaaa325bf89ea34e3bd58ad0f43f2f9050e

  • SSDEEP

    3072:ZdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUE:bGazIc6TVBMrOpzeJEsuirSGEMpgE8

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      2dac17fbb595d3a55a512acdf7283517b758e7db6e7ddb7c72544d7ecae472d5N.exe

    • Size

      204KB

    • MD5

      93572eb9a4a52732b8970bc377135590

    • SHA1

      888d5a6b0fa0a1d18fa2fd1a8251af3f4e3054c3

    • SHA256

      2dac17fbb595d3a55a512acdf7283517b758e7db6e7ddb7c72544d7ecae472d5

    • SHA512

      63e10e17bca0b731e6fab200628ba46fafc9914ad6174a9a79d63a6cd1cbca522f0394878a341caa18f5cbd2d923afaaa325bf89ea34e3bd58ad0f43f2f9050e

    • SSDEEP

      3072:ZdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFUE:bGazIc6TVBMrOpzeJEsuirSGEMpgE8

MITRE ATT&CK Enterprise v15

Tasks