General

  • Target

    137ebd2e486e324091bb0bb8ea7698f9245e05e60c0a393e7ac5795a988515d5N.exe

  • Size

    235KB

  • Sample

    241222-dqgaba1mdt

  • MD5

    c5be7d0dec9103bb2c4173ef6bfe1d60

  • SHA1

    3bb847c3484441c276f7fc16ead4e7214a3bfe96

  • SHA256

    137ebd2e486e324091bb0bb8ea7698f9245e05e60c0a393e7ac5795a988515d5

  • SHA512

    5d13cc52f1701152b69b65a9b7067f23c628691ff57f1cc0f5443087617562d8acbc040fe8f45958e7d6e17a62531096f4e3c8c81c1b013b774d65b5bba95406

  • SSDEEP

    6144:MKP3AAe679MuCGA04izCqmseHPWditiXIKfftNo:MK4ZIMuf4iCBvn84K96

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      137ebd2e486e324091bb0bb8ea7698f9245e05e60c0a393e7ac5795a988515d5N.exe

    • Size

      235KB

    • MD5

      c5be7d0dec9103bb2c4173ef6bfe1d60

    • SHA1

      3bb847c3484441c276f7fc16ead4e7214a3bfe96

    • SHA256

      137ebd2e486e324091bb0bb8ea7698f9245e05e60c0a393e7ac5795a988515d5

    • SHA512

      5d13cc52f1701152b69b65a9b7067f23c628691ff57f1cc0f5443087617562d8acbc040fe8f45958e7d6e17a62531096f4e3c8c81c1b013b774d65b5bba95406

    • SSDEEP

      6144:MKP3AAe679MuCGA04izCqmseHPWditiXIKfftNo:MK4ZIMuf4iCBvn84K96

MITRE ATT&CK Enterprise v15

Tasks