General

  • Target

    3114d2ff7ccf405c3ada70beb2fc0c5f15797621b4a8ac4917f298c51ff1f007N.exe

  • Size

    1.0MB

  • Sample

    241216-ne5hwayrek

  • MD5

    f03fb123b235af5860c515a64e5ba1d0

  • SHA1

    e3a1ec90d8ad6471726df5bb685f0d1e586b2359

  • SHA256

    3114d2ff7ccf405c3ada70beb2fc0c5f15797621b4a8ac4917f298c51ff1f007

  • SHA512

    9676dd31c2c8349d21e4d14eacd59a057827553bfec7427534dd5c352aee259af517f0d244dd90f05ece971dd479ef53f440fa4a51c8131e2faf2e24dbf1331d

  • SSDEEP

    24576:8mUNJyJqb1FcMap2ATT5TmUNJyJqb1FcMap2ATT5TmUNJyJqb1FcMap2ATT58:8mV2ApTmV2ApTmV2Ap8

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      3114d2ff7ccf405c3ada70beb2fc0c5f15797621b4a8ac4917f298c51ff1f007N.exe

    • Size

      1.0MB

    • MD5

      f03fb123b235af5860c515a64e5ba1d0

    • SHA1

      e3a1ec90d8ad6471726df5bb685f0d1e586b2359

    • SHA256

      3114d2ff7ccf405c3ada70beb2fc0c5f15797621b4a8ac4917f298c51ff1f007

    • SHA512

      9676dd31c2c8349d21e4d14eacd59a057827553bfec7427534dd5c352aee259af517f0d244dd90f05ece971dd479ef53f440fa4a51c8131e2faf2e24dbf1331d

    • SSDEEP

      24576:8mUNJyJqb1FcMap2ATT5TmUNJyJqb1FcMap2ATT5TmUNJyJqb1FcMap2ATT58:8mV2ApTmV2ApTmV2Ap8

MITRE ATT&CK Enterprise v15

Tasks