General

  • Target

    37bdf8a52ba703f5477eae6cec5b387f9dc5a71464f7071ba500959f6fbca9d0

  • Size

    208KB

  • Sample

    241209-zmmtkswkcm

  • MD5

    20a898ad31a23b0148ba13afddc6a6b0

  • SHA1

    bf3e6d54f7836c7c080d23ec15b90b3536fff35d

  • SHA256

    37bdf8a52ba703f5477eae6cec5b387f9dc5a71464f7071ba500959f6fbca9d0

  • SHA512

    a57361e59029770c5edcc0f508cfb207e8e4970514eef95f67597a6354ad74b1d92dd0be9c1d55bb725da870eed3a8f018c2af7a2916d2565f2f2a6d52a2959a

  • SSDEEP

    6144:qa1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfkw:qbapK0JCmRcU9vVokfD

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      37bdf8a52ba703f5477eae6cec5b387f9dc5a71464f7071ba500959f6fbca9d0

    • Size

      208KB

    • MD5

      20a898ad31a23b0148ba13afddc6a6b0

    • SHA1

      bf3e6d54f7836c7c080d23ec15b90b3536fff35d

    • SHA256

      37bdf8a52ba703f5477eae6cec5b387f9dc5a71464f7071ba500959f6fbca9d0

    • SHA512

      a57361e59029770c5edcc0f508cfb207e8e4970514eef95f67597a6354ad74b1d92dd0be9c1d55bb725da870eed3a8f018c2af7a2916d2565f2f2a6d52a2959a

    • SSDEEP

      6144:qa1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfkw:qbapK0JCmRcU9vVokfD

MITRE ATT&CK Enterprise v15

Tasks