General

  • Target

    f4d3cf3d5f0054698ac82507fb07ddbba7eaa77edcc2490ca48397a1b2e366ab.exe

  • Size

    218KB

  • Sample

    241226-n5q36svpaj

  • MD5

    d6bc3456bb2aec04b016c0744f6dbccf

  • SHA1

    6cc2d02959c56356d86efdf26c0667bdeeb64eeb

  • SHA256

    f4d3cf3d5f0054698ac82507fb07ddbba7eaa77edcc2490ca48397a1b2e366ab

  • SHA512

    9e574ab2ff3355145306526c7ed857561e7d26ca73fd9376203c72e0f2a90f9c52166e370301df520e9256dbdddd68d82c580cc83725e25275b4e5f6b2a7c60f

  • SSDEEP

    6144:iEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICG:iEGDdQNHEwWlMxYG/wIp

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      f4d3cf3d5f0054698ac82507fb07ddbba7eaa77edcc2490ca48397a1b2e366ab.exe

    • Size

      218KB

    • MD5

      d6bc3456bb2aec04b016c0744f6dbccf

    • SHA1

      6cc2d02959c56356d86efdf26c0667bdeeb64eeb

    • SHA256

      f4d3cf3d5f0054698ac82507fb07ddbba7eaa77edcc2490ca48397a1b2e366ab

    • SHA512

      9e574ab2ff3355145306526c7ed857561e7d26ca73fd9376203c72e0f2a90f9c52166e370301df520e9256dbdddd68d82c580cc83725e25275b4e5f6b2a7c60f

    • SSDEEP

      6144:iEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICG:iEGDdQNHEwWlMxYG/wIp

MITRE ATT&CK Enterprise v15

Tasks