General

  • Target

    fe9c78e65cecda53bc2c770681df2f2357f2304660385fcff24b73136188cbff.exe

  • Size

    218KB

  • Sample

    241204-jg31lstkal

  • MD5

    5e4d0db17a1b180c1270e6669cec9baa

  • SHA1

    9a6df4bb09bbc8eb211704175c90f91cf0d40051

  • SHA256

    fe9c78e65cecda53bc2c770681df2f2357f2304660385fcff24b73136188cbff

  • SHA512

    6cf2136bfafa28da50da83892e6cc81002565b8d289ab73af578993f4a668629f52b7a4b17d64ff390143fa9d81fd1ddabd1a94074ab11bda8a39a10484c4920

  • SSDEEP

    6144:mEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICW:mEGDdQNHEwWlMxYG/wIR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      fe9c78e65cecda53bc2c770681df2f2357f2304660385fcff24b73136188cbff.exe

    • Size

      218KB

    • MD5

      5e4d0db17a1b180c1270e6669cec9baa

    • SHA1

      9a6df4bb09bbc8eb211704175c90f91cf0d40051

    • SHA256

      fe9c78e65cecda53bc2c770681df2f2357f2304660385fcff24b73136188cbff

    • SHA512

      6cf2136bfafa28da50da83892e6cc81002565b8d289ab73af578993f4a668629f52b7a4b17d64ff390143fa9d81fd1ddabd1a94074ab11bda8a39a10484c4920

    • SSDEEP

      6144:mEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICW:mEGDdQNHEwWlMxYG/wIR

MITRE ATT&CK Enterprise v15

Tasks