General

  • Target

    b802021fc6ccc3a8d2a202f729634f136a48c75f5feabc71957767941e57ecefN.exe

  • Size

    218KB

  • Sample

    241208-d3r8cazqev

  • MD5

    93355c0d600b77c2f5728e4cd168e590

  • SHA1

    96369f09cf16b5e6f86b8b66bbad0213ecf9e215

  • SHA256

    b802021fc6ccc3a8d2a202f729634f136a48c75f5feabc71957767941e57ecef

  • SHA512

    1d115dec462553a6ed058ed7654c32ce6b24eeb669ea40d7637708fb1a366fb5d641f0af3c7b07552d0315dcd20f459d084f4d196bd419c5ad944fccb593bb6c

  • SSDEEP

    3072:vvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:H1SyAJp6rjn1gOObn4b6h9h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      b802021fc6ccc3a8d2a202f729634f136a48c75f5feabc71957767941e57ecefN.exe

    • Size

      218KB

    • MD5

      93355c0d600b77c2f5728e4cd168e590

    • SHA1

      96369f09cf16b5e6f86b8b66bbad0213ecf9e215

    • SHA256

      b802021fc6ccc3a8d2a202f729634f136a48c75f5feabc71957767941e57ecef

    • SHA512

      1d115dec462553a6ed058ed7654c32ce6b24eeb669ea40d7637708fb1a366fb5d641f0af3c7b07552d0315dcd20f459d084f4d196bd419c5ad944fccb593bb6c

    • SSDEEP

      3072:vvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:H1SyAJp6rjn1gOObn4b6h9h

MITRE ATT&CK Enterprise v15

Tasks