General

  • Target

    3a8760dced853ce9e412c6d514bc3de839d1eb713b7f451ec13014fc80784d3f.exe

  • Size

    254KB

  • Sample

    241210-prrm8azreq

  • MD5

    bf3eb99359ad49f1da3b79b6edd9840f

  • SHA1

    8c4d1f6f92d85b90c1d3c3a279162a8107df615c

  • SHA256

    3a8760dced853ce9e412c6d514bc3de839d1eb713b7f451ec13014fc80784d3f

  • SHA512

    cc1179271702890481697f479fd15405f0d0aba474d0699b3f63e95bf57d490f887b64fcd5a5d705a8bf8b91805e3ecb7859b35761039d5f5f90e13f126f17ef

  • SSDEEP

    3072:N/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z2s:JwVhk8cgSVLaGD8bQNZqU/Zq7PmyjrxQ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      3a8760dced853ce9e412c6d514bc3de839d1eb713b7f451ec13014fc80784d3f.exe

    • Size

      254KB

    • MD5

      bf3eb99359ad49f1da3b79b6edd9840f

    • SHA1

      8c4d1f6f92d85b90c1d3c3a279162a8107df615c

    • SHA256

      3a8760dced853ce9e412c6d514bc3de839d1eb713b7f451ec13014fc80784d3f

    • SHA512

      cc1179271702890481697f479fd15405f0d0aba474d0699b3f63e95bf57d490f887b64fcd5a5d705a8bf8b91805e3ecb7859b35761039d5f5f90e13f126f17ef

    • SSDEEP

      3072:N/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z2s:JwVhk8cgSVLaGD8bQNZqU/Zq7PmyjrxQ

MITRE ATT&CK Enterprise v15

Tasks