General

  • Target

    763b48b8a7163d4a309ede8543446870010b9212722751549e618261eafa2a0a.exe

  • Size

    204KB

  • Sample

    241219-le5sjayqgp

  • MD5

    db65a01b306b98006d936ff8c1bc9ace

  • SHA1

    9f2276f77b5b96773aa0e9db6cf682ad1c7cda26

  • SHA256

    763b48b8a7163d4a309ede8543446870010b9212722751549e618261eafa2a0a

  • SHA512

    c253908e2683aa981d6906ef663fd5aeb3165b15f6d3a0efa1167f58d5ada7ba1aa08af57700023f4b8734d8dd6e391f1e5f9d04e3c3cb2ccdfa6afd0d7c447f

  • SSDEEP

    3072:T5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlA4:TLexkuRaX41xoyJV65gzyZko+ucZ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      763b48b8a7163d4a309ede8543446870010b9212722751549e618261eafa2a0a.exe

    • Size

      204KB

    • MD5

      db65a01b306b98006d936ff8c1bc9ace

    • SHA1

      9f2276f77b5b96773aa0e9db6cf682ad1c7cda26

    • SHA256

      763b48b8a7163d4a309ede8543446870010b9212722751549e618261eafa2a0a

    • SHA512

      c253908e2683aa981d6906ef663fd5aeb3165b15f6d3a0efa1167f58d5ada7ba1aa08af57700023f4b8734d8dd6e391f1e5f9d04e3c3cb2ccdfa6afd0d7c447f

    • SSDEEP

      3072:T5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlA4:TLexkuRaX41xoyJV65gzyZko+ucZ

MITRE ATT&CK Enterprise v15

Tasks