General

  • Target

    14089291f3a46294ac032cb76c616cbe6e5ad7a215b6af4225a6ddd4404ce063N.exe

  • Size

    375KB

  • Sample

    241207-ceweeszkfw

  • MD5

    fdc499e743db1c40692119e905a4fb00

  • SHA1

    c516a94f765f5d1ee34f46ac6b3060e5bfdaaa3f

  • SHA256

    14089291f3a46294ac032cb76c616cbe6e5ad7a215b6af4225a6ddd4404ce063

  • SHA512

    43a8f9f192e15b255b8ad9437384a23210e3311321b70d4713e80b5bbe5188171b6027b4497fcd2514944c7ecec6dc6c2e8d4a690006d33072cf3c30a5b1707f

  • SSDEEP

    6144:g3EmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9EiU:7mWhND9yJz+b1FcMLmp2ATTSsdU

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      14089291f3a46294ac032cb76c616cbe6e5ad7a215b6af4225a6ddd4404ce063N.exe

    • Size

      375KB

    • MD5

      fdc499e743db1c40692119e905a4fb00

    • SHA1

      c516a94f765f5d1ee34f46ac6b3060e5bfdaaa3f

    • SHA256

      14089291f3a46294ac032cb76c616cbe6e5ad7a215b6af4225a6ddd4404ce063

    • SHA512

      43a8f9f192e15b255b8ad9437384a23210e3311321b70d4713e80b5bbe5188171b6027b4497fcd2514944c7ecec6dc6c2e8d4a690006d33072cf3c30a5b1707f

    • SSDEEP

      6144:g3EmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9EiU:7mWhND9yJz+b1FcMLmp2ATTSsdU

MITRE ATT&CK Enterprise v15

Tasks