General

  • Target

    add6ea00019590cc450a2ff4bd7d9ff4eff6c1974d5415422872ef7b380d6820N.exe

  • Size

    232KB

  • Sample

    241231-fr7j1ayqd1

  • MD5

    f575e0c50f3bdc4ea40e9beb0935faa0

  • SHA1

    925936535af927655629918ae84b5016ae0ed647

  • SHA256

    add6ea00019590cc450a2ff4bd7d9ff4eff6c1974d5415422872ef7b380d6820

  • SHA512

    cc865f0c4b58c812058d56423b2c01592fcb87686d12f12f4df6dd2df87a230c2d3019c33d8b12636a7cda43879c750c1889e71706ef90634900b0977dae6bb6

  • SSDEEP

    6144:JzHnMLm5GNGxHUhtnkdpHqTKzhh8r6cb21u:Jf58GxUh5kHyKFhW6cb21u

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      add6ea00019590cc450a2ff4bd7d9ff4eff6c1974d5415422872ef7b380d6820N.exe

    • Size

      232KB

    • MD5

      f575e0c50f3bdc4ea40e9beb0935faa0

    • SHA1

      925936535af927655629918ae84b5016ae0ed647

    • SHA256

      add6ea00019590cc450a2ff4bd7d9ff4eff6c1974d5415422872ef7b380d6820

    • SHA512

      cc865f0c4b58c812058d56423b2c01592fcb87686d12f12f4df6dd2df87a230c2d3019c33d8b12636a7cda43879c750c1889e71706ef90634900b0977dae6bb6

    • SSDEEP

      6144:JzHnMLm5GNGxHUhtnkdpHqTKzhh8r6cb21u:Jf58GxUh5kHyKFhW6cb21u

MITRE ATT&CK Enterprise v15

Tasks