General

  • Target

    e6fbafcb4b396f7bb06287aa1b13d6c7f94d454a3a0f123d6eeed212fc76fdd2N.exe

  • Size

    269KB

  • Sample

    241231-wkrszasjcy

  • MD5

    2ba4d13b830b3e02575c20b1dbfdd6e0

  • SHA1

    3da870d0e0492b4b90931834e4cf19693603981e

  • SHA256

    e6fbafcb4b396f7bb06287aa1b13d6c7f94d454a3a0f123d6eeed212fc76fdd2

  • SHA512

    eb484bbe76ec40819f72ecc1353161bf4e038bad5d4f0539234aba337cc20a405d3b5610f2d51beee99ee38c332fe7f63288afb6abfad0d0bac43229b40a3423

  • SSDEEP

    3072:iAn6oNA5f/hK9eb+iY86PLJ83pBw0q6FjctDuFbIbXuUZayuNmhofrwr2LDDHyt2:iA6aAv+5iYPEzF0ZZay/ofrwr0DDHC2n

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      e6fbafcb4b396f7bb06287aa1b13d6c7f94d454a3a0f123d6eeed212fc76fdd2N.exe

    • Size

      269KB

    • MD5

      2ba4d13b830b3e02575c20b1dbfdd6e0

    • SHA1

      3da870d0e0492b4b90931834e4cf19693603981e

    • SHA256

      e6fbafcb4b396f7bb06287aa1b13d6c7f94d454a3a0f123d6eeed212fc76fdd2

    • SHA512

      eb484bbe76ec40819f72ecc1353161bf4e038bad5d4f0539234aba337cc20a405d3b5610f2d51beee99ee38c332fe7f63288afb6abfad0d0bac43229b40a3423

    • SSDEEP

      3072:iAn6oNA5f/hK9eb+iY86PLJ83pBw0q6FjctDuFbIbXuUZayuNmhofrwr2LDDHyt2:iA6aAv+5iYPEzF0ZZay/ofrwr0DDHC2n

MITRE ATT&CK Enterprise v15

Tasks