General

  • Target

    a0ead56d1eb968d14d374c0436571c5ee6f6a927aabadee2102ef85e12532e23.exe

  • Size

    266KB

  • Sample

    241219-gg5s4asjer

  • MD5

    6e0f8f94bae095c2d0776d312cf535f0

  • SHA1

    b45bf27f03885a50e5de1e3d1d6c60ac2305eac1

  • SHA256

    a0ead56d1eb968d14d374c0436571c5ee6f6a927aabadee2102ef85e12532e23

  • SHA512

    634535cdfb617356c05851e31e51c7940627de8dbdc516724d357406d6c960575b638372c908219ed676a539d4eb0ccf6493e19d00133ae138feb60fc5c3ba80

  • SSDEEP

    6144:NAA5h+K8ze8SUPUvE0/X8b+rEiFsu6/kDmKJ8GC3A3c9:S2QKP2r1itBDmEyy8

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      a0ead56d1eb968d14d374c0436571c5ee6f6a927aabadee2102ef85e12532e23.exe

    • Size

      266KB

    • MD5

      6e0f8f94bae095c2d0776d312cf535f0

    • SHA1

      b45bf27f03885a50e5de1e3d1d6c60ac2305eac1

    • SHA256

      a0ead56d1eb968d14d374c0436571c5ee6f6a927aabadee2102ef85e12532e23

    • SHA512

      634535cdfb617356c05851e31e51c7940627de8dbdc516724d357406d6c960575b638372c908219ed676a539d4eb0ccf6493e19d00133ae138feb60fc5c3ba80

    • SSDEEP

      6144:NAA5h+K8ze8SUPUvE0/X8b+rEiFsu6/kDmKJ8GC3A3c9:S2QKP2r1itBDmEyy8

MITRE ATT&CK Enterprise v15

Tasks