General

  • Target

    160e8f59b748e4155e747f937d766229a1ff2cfcea78ba069fc9be3cb56ef30c.exe

  • Size

    208KB

  • Sample

    241226-r2y66axqb1

  • MD5

    fe7bd2be4dd6754957ab552bebb1699c

  • SHA1

    22c5316083e9c50610e7a29cbf6d1b8b9571e845

  • SHA256

    160e8f59b748e4155e747f937d766229a1ff2cfcea78ba069fc9be3cb56ef30c

  • SHA512

    5652922b32d0b20682f39e75fd8cd545fca890d14ba7a64eb521065f4225900cc8bfc81743fa77ca668b9879fa5b6133b1702914328981335d4f2542e39961c3

  • SSDEEP

    6144:BZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:zquCuygMQjd5vJIBP1J

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      160e8f59b748e4155e747f937d766229a1ff2cfcea78ba069fc9be3cb56ef30c.exe

    • Size

      208KB

    • MD5

      fe7bd2be4dd6754957ab552bebb1699c

    • SHA1

      22c5316083e9c50610e7a29cbf6d1b8b9571e845

    • SHA256

      160e8f59b748e4155e747f937d766229a1ff2cfcea78ba069fc9be3cb56ef30c

    • SHA512

      5652922b32d0b20682f39e75fd8cd545fca890d14ba7a64eb521065f4225900cc8bfc81743fa77ca668b9879fa5b6133b1702914328981335d4f2542e39961c3

    • SSDEEP

      6144:BZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:zquCuygMQjd5vJIBP1J

MITRE ATT&CK Enterprise v15

Tasks