General

  • Target

    38e1ca030d9bd3babcbe6dc927e4ce69231700a22788b94ea0e42c87f0ffe424N.exe

  • Size

    1.0MB

  • Sample

    241217-zlscnsxmhv

  • MD5

    4d3191371f74198e82bb5bfe0bddd7f0

  • SHA1

    9b632cb16b07e88724085239c44dadc249b11d10

  • SHA256

    38e1ca030d9bd3babcbe6dc927e4ce69231700a22788b94ea0e42c87f0ffe424

  • SHA512

    abe73d7fc6bab746d85c0b4ba3c08cd2beef927b5b7f309cc85051ff84072755a7d9c731c6aad3e4f7dc9218c0c2285c0dcb5ca8b9ef74332c9fc7a8ec72be33

  • SSDEEP

    24576:PmUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT58:PmV2ApemV2ApemV2Ap8

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      38e1ca030d9bd3babcbe6dc927e4ce69231700a22788b94ea0e42c87f0ffe424N.exe

    • Size

      1.0MB

    • MD5

      4d3191371f74198e82bb5bfe0bddd7f0

    • SHA1

      9b632cb16b07e88724085239c44dadc249b11d10

    • SHA256

      38e1ca030d9bd3babcbe6dc927e4ce69231700a22788b94ea0e42c87f0ffe424

    • SHA512

      abe73d7fc6bab746d85c0b4ba3c08cd2beef927b5b7f309cc85051ff84072755a7d9c731c6aad3e4f7dc9218c0c2285c0dcb5ca8b9ef74332c9fc7a8ec72be33

    • SSDEEP

      24576:PmUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT58:PmV2ApemV2ApemV2Ap8

MITRE ATT&CK Enterprise v15

Tasks