General

  • Target

    11952e299761dd9de07eb47c4d8f794827db1482a1b0607973cee6388fa3649f

  • Size

    270KB

  • Sample

    241203-ygnm9awmhr

  • MD5

    baaa8f013ff5f2b2b0ccc4471acf49bd

  • SHA1

    28b20d2e602ec47651e6c05f5f536c7574f2c87d

  • SHA256

    11952e299761dd9de07eb47c4d8f794827db1482a1b0607973cee6388fa3649f

  • SHA512

    1603c30601b45e918ba771864095d7c1e6c12934964e6a0683af537895f5dbfec943c2793db05907352f16fc2cc475a8f9a654f87a13b0109e14e92819833479

  • SSDEEP

    6144:wjcTBACrxi9f3FuWn6z0g/F5MGUhdrCV2CUCZKc06E+Wd+PD6:aCrxi9f1uXz0g/F5MGUhREDZ0fd+L

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      11952e299761dd9de07eb47c4d8f794827db1482a1b0607973cee6388fa3649f

    • Size

      270KB

    • MD5

      baaa8f013ff5f2b2b0ccc4471acf49bd

    • SHA1

      28b20d2e602ec47651e6c05f5f536c7574f2c87d

    • SHA256

      11952e299761dd9de07eb47c4d8f794827db1482a1b0607973cee6388fa3649f

    • SHA512

      1603c30601b45e918ba771864095d7c1e6c12934964e6a0683af537895f5dbfec943c2793db05907352f16fc2cc475a8f9a654f87a13b0109e14e92819833479

    • SSDEEP

      6144:wjcTBACrxi9f3FuWn6z0g/F5MGUhdrCV2CUCZKc06E+Wd+PD6:aCrxi9f1uXz0g/F5MGUhREDZ0fd+L

MITRE ATT&CK Enterprise v15

Tasks