General

  • Target

    736f1a5a1eb821b4efe0ea712696ed4311a07ffe0ff0e34412dbf29491b63185N.exe

  • Size

    208KB

  • Sample

    241225-sbhl6awjew

  • MD5

    e69cd1f50b3e4f4fbb8408b1b7cec380

  • SHA1

    a9db441b1ee254768f73201fa828a734f89d4631

  • SHA256

    736f1a5a1eb821b4efe0ea712696ed4311a07ffe0ff0e34412dbf29491b63185

  • SHA512

    21b9bf474c534d8e624949049a029a12fdfddda1cb15c4620e1379e471f63c07315c2f48979efb34065e7fc65a3bc0bc1a6c898a1976031abbdbc0ee8f28bd0b

  • SSDEEP

    3072:OUpRi1s+S52fNiQGUaqcJeGwxruUIiau038t6eTNzW+XERycnR3FPEtprO8OFb5+:k1wuNiQj4hwBEu0MYqVmXBFPEjRiGdz

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      736f1a5a1eb821b4efe0ea712696ed4311a07ffe0ff0e34412dbf29491b63185N.exe

    • Size

      208KB

    • MD5

      e69cd1f50b3e4f4fbb8408b1b7cec380

    • SHA1

      a9db441b1ee254768f73201fa828a734f89d4631

    • SHA256

      736f1a5a1eb821b4efe0ea712696ed4311a07ffe0ff0e34412dbf29491b63185

    • SHA512

      21b9bf474c534d8e624949049a029a12fdfddda1cb15c4620e1379e471f63c07315c2f48979efb34065e7fc65a3bc0bc1a6c898a1976031abbdbc0ee8f28bd0b

    • SSDEEP

      3072:OUpRi1s+S52fNiQGUaqcJeGwxruUIiau038t6eTNzW+XERycnR3FPEtprO8OFb5+:k1wuNiQj4hwBEu0MYqVmXBFPEjRiGdz

MITRE ATT&CK Enterprise v15

Tasks