General

  • Target

    870012d834ee7146d3221ec976e816dd76420f55151d32faea79107cb1ca7e2e.exe

  • Size

    355KB

  • Sample

    241218-c7ay7ayrgv

  • MD5

    3f14f5f3463221269c23e37f50c8a2c4

  • SHA1

    0408dc4449926a31e7fcc7b8f6c3b516f3bb61b4

  • SHA256

    870012d834ee7146d3221ec976e816dd76420f55151d32faea79107cb1ca7e2e

  • SHA512

    5dd24520198b54ad8edb0a773117c1fb1619a2dd51e81572c37dbe53987200609fe9909ba80373710f4d12067e173488f07dc53fb4e4cdd7e5f5ef6bb7b8bd6b

  • SSDEEP

    6144:MgEmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9Ei3:OmWhND9yJz+b1FcMLmp2ATTSsd3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      870012d834ee7146d3221ec976e816dd76420f55151d32faea79107cb1ca7e2e.exe

    • Size

      355KB

    • MD5

      3f14f5f3463221269c23e37f50c8a2c4

    • SHA1

      0408dc4449926a31e7fcc7b8f6c3b516f3bb61b4

    • SHA256

      870012d834ee7146d3221ec976e816dd76420f55151d32faea79107cb1ca7e2e

    • SHA512

      5dd24520198b54ad8edb0a773117c1fb1619a2dd51e81572c37dbe53987200609fe9909ba80373710f4d12067e173488f07dc53fb4e4cdd7e5f5ef6bb7b8bd6b

    • SSDEEP

      6144:MgEmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9Ei3:OmWhND9yJz+b1FcMLmp2ATTSsd3

MITRE ATT&CK Enterprise v15

Tasks