General

  • Target

    97830820a518c67bf032573aa0785d830f648ceb2ad777868b32fd1ce0c73a6c.exe

  • Size

    269KB

  • Sample

    241231-exkfzsxlbv

  • MD5

    6d8449c2edc6ebc329b915f1ebe99c50

  • SHA1

    3a3f2e0f3f4304291353560690543fa99d02b2d7

  • SHA256

    97830820a518c67bf032573aa0785d830f648ceb2ad777868b32fd1ce0c73a6c

  • SHA512

    04752d87067e2dee361e8ba12caccc407dd62c3cc2f95801e3e832c6f29107c5b189ed3030a745e962919629629ef53893e13cd5ba9df3adb9c310e1ce5f998b

  • SSDEEP

    3072:iAn6oNA5f/hK9eb+iY86PLJ83pBw0q6FjctDuFbIbXuUZayuNmhofrwr2LDDHytW:iA6aAv+5iYPEzF0ZZay/ofrwr0DDHC23

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      97830820a518c67bf032573aa0785d830f648ceb2ad777868b32fd1ce0c73a6c.exe

    • Size

      269KB

    • MD5

      6d8449c2edc6ebc329b915f1ebe99c50

    • SHA1

      3a3f2e0f3f4304291353560690543fa99d02b2d7

    • SHA256

      97830820a518c67bf032573aa0785d830f648ceb2ad777868b32fd1ce0c73a6c

    • SHA512

      04752d87067e2dee361e8ba12caccc407dd62c3cc2f95801e3e832c6f29107c5b189ed3030a745e962919629629ef53893e13cd5ba9df3adb9c310e1ce5f998b

    • SSDEEP

      3072:iAn6oNA5f/hK9eb+iY86PLJ83pBw0q6FjctDuFbIbXuUZayuNmhofrwr2LDDHytW:iA6aAv+5iYPEzF0ZZay/ofrwr0DDHC23

MITRE ATT&CK Enterprise v15

Tasks