General

  • Target

    562631ace6a0119b0eb539acc96afa2528fa83feae8508abf14d631f7cecd89c.exe

  • Size

    218KB

  • Sample

    241226-jhysaazmhs

  • MD5

    d4a6f35f1300fe48276feea3a5ae607f

  • SHA1

    21c597348fe7e3a61aab5a786adf4068b0441035

  • SHA256

    562631ace6a0119b0eb539acc96afa2528fa83feae8508abf14d631f7cecd89c

  • SHA512

    7f4a03ca3c6ae39c9d59e1dcade74a355dac7c8a795888a2ab4f11eff7734f061b234974145d8c405eb7b55909d55fa0b9ea9bb47e059fa60f76daee58fdee4f

  • SSDEEP

    6144:GEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICG:GEGDdQNHEwWlMxYG/wIp

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      562631ace6a0119b0eb539acc96afa2528fa83feae8508abf14d631f7cecd89c.exe

    • Size

      218KB

    • MD5

      d4a6f35f1300fe48276feea3a5ae607f

    • SHA1

      21c597348fe7e3a61aab5a786adf4068b0441035

    • SHA256

      562631ace6a0119b0eb539acc96afa2528fa83feae8508abf14d631f7cecd89c

    • SHA512

      7f4a03ca3c6ae39c9d59e1dcade74a355dac7c8a795888a2ab4f11eff7734f061b234974145d8c405eb7b55909d55fa0b9ea9bb47e059fa60f76daee58fdee4f

    • SSDEEP

      6144:GEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICG:GEGDdQNHEwWlMxYG/wIp

MITRE ATT&CK Enterprise v15

Tasks