General

  • Target

    c545fe3170018c5b87e8b5c7dd22ad7d4fef76a4cf5c878520f56543067ccd4b.exe

  • Size

    686KB

  • Sample

    241219-e4ybesyjby

  • MD5

    3c199ceae439f7e0ba573e00beb9c21a

  • SHA1

    8154e33135e2c9f6b183c6ffa2971f19be8f9a14

  • SHA256

    c545fe3170018c5b87e8b5c7dd22ad7d4fef76a4cf5c878520f56543067ccd4b

  • SHA512

    cf98e120f8b7d1ae26932e8b363d0c8bc5dcb7f1ec01cfc014ffdd5f1622c55ae784e526aa2404083183d73ad8834b899c3bfc251401be7cb7daac3fa1261a20

  • SSDEEP

    12288:imWhND9yJz+b1FcMLmp2ATTSsdApVHyGbs2CYPHrLpVmCbHDSgpX:imUNJyJqb1FcMap2ATT5itjCYZ3DSoX

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      c545fe3170018c5b87e8b5c7dd22ad7d4fef76a4cf5c878520f56543067ccd4b.exe

    • Size

      686KB

    • MD5

      3c199ceae439f7e0ba573e00beb9c21a

    • SHA1

      8154e33135e2c9f6b183c6ffa2971f19be8f9a14

    • SHA256

      c545fe3170018c5b87e8b5c7dd22ad7d4fef76a4cf5c878520f56543067ccd4b

    • SHA512

      cf98e120f8b7d1ae26932e8b363d0c8bc5dcb7f1ec01cfc014ffdd5f1622c55ae784e526aa2404083183d73ad8834b899c3bfc251401be7cb7daac3fa1261a20

    • SSDEEP

      12288:imWhND9yJz+b1FcMLmp2ATTSsdApVHyGbs2CYPHrLpVmCbHDSgpX:imUNJyJqb1FcMap2ATT5itjCYZ3DSoX

MITRE ATT&CK Enterprise v15

Tasks