General

  • Target

    1b5059b735c0d710b728c80c2e7fb94283f7415b07e87d1c70ea6bad69e24a99.exe

  • Size

    235KB

  • Sample

    241222-jppsyszpcj

  • MD5

    d7a2573dde21482a28afb38718f2313f

  • SHA1

    b17a59997aa1a3c88234694a7cfa15c77ebf4237

  • SHA256

    1b5059b735c0d710b728c80c2e7fb94283f7415b07e87d1c70ea6bad69e24a99

  • SHA512

    c218d55e86491a6a9cf6d777d2d21b7773f0c0a0217cd31f85f1dee4709cc5ac8970cf99e3b92dd11c081709c29fe432e7bd24b5c400913580840499098b0de4

  • SSDEEP

    6144:MKP3AAe679MuCGA04izCqmseHPWditiXIKfftNoj:MK4ZIMuf4iCBvn84K96j

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      1b5059b735c0d710b728c80c2e7fb94283f7415b07e87d1c70ea6bad69e24a99.exe

    • Size

      235KB

    • MD5

      d7a2573dde21482a28afb38718f2313f

    • SHA1

      b17a59997aa1a3c88234694a7cfa15c77ebf4237

    • SHA256

      1b5059b735c0d710b728c80c2e7fb94283f7415b07e87d1c70ea6bad69e24a99

    • SHA512

      c218d55e86491a6a9cf6d777d2d21b7773f0c0a0217cd31f85f1dee4709cc5ac8970cf99e3b92dd11c081709c29fe432e7bd24b5c400913580840499098b0de4

    • SSDEEP

      6144:MKP3AAe679MuCGA04izCqmseHPWditiXIKfftNoj:MK4ZIMuf4iCBvn84K96j

MITRE ATT&CK Enterprise v15

Tasks