General

  • Target

    64a29b19fb9379687b6b69cac545962c81e4caa890bae17642661a930ed76f53.exe

  • Size

    218KB

  • Sample

    241219-aamwdaymdr

  • MD5

    d932bba837f02c210c4d1672ff74a85a

  • SHA1

    cff0cfc7a149bb4c7a4b3c7e64cf382cb4fada17

  • SHA256

    64a29b19fb9379687b6b69cac545962c81e4caa890bae17642661a930ed76f53

  • SHA512

    5403487369e8f259b79dcf96c2c8f16eba150f4a1c389680c35704faecd2d5f47e1ca2ac0fcf288397f986b841fa1af7eeb972e6e92e9e2fbeb5b1763fe1e057

  • SSDEEP

    3072:Uvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2Hq:i1SyAJp6rjn1gOObn4b6h9p

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      64a29b19fb9379687b6b69cac545962c81e4caa890bae17642661a930ed76f53.exe

    • Size

      218KB

    • MD5

      d932bba837f02c210c4d1672ff74a85a

    • SHA1

      cff0cfc7a149bb4c7a4b3c7e64cf382cb4fada17

    • SHA256

      64a29b19fb9379687b6b69cac545962c81e4caa890bae17642661a930ed76f53

    • SHA512

      5403487369e8f259b79dcf96c2c8f16eba150f4a1c389680c35704faecd2d5f47e1ca2ac0fcf288397f986b841fa1af7eeb972e6e92e9e2fbeb5b1763fe1e057

    • SSDEEP

      3072:Uvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2Hq:i1SyAJp6rjn1gOObn4b6h9p

MITRE ATT&CK Enterprise v15

Tasks