General

  • Target

    f3025c0aaeb6325e1ded42ae5f79a3616768140f5ee326e16cc9bfe18026bb48.exe

  • Size

    256KB

  • Sample

    241231-ysl9kawrdx

  • MD5

    4c7f3bb479587b22bbd2e964aca1ab50

  • SHA1

    6424044d237688b9e9de516de06f605ed9dfd21c

  • SHA256

    f3025c0aaeb6325e1ded42ae5f79a3616768140f5ee326e16cc9bfe18026bb48

  • SHA512

    32de69bb746589077434f346c04865256fe1a15599e3ed9964f928ebc0853268092417bea2b5d7236240ed5b4d34dd7087e0659cff46400c8c93cea6f1b03339

  • SSDEEP

    6144:+pSkwLJrufeODAS72qOisSZRmICxHK6kNdvllcCH:HkWJrufop6lCHkNH

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      f3025c0aaeb6325e1ded42ae5f79a3616768140f5ee326e16cc9bfe18026bb48.exe

    • Size

      256KB

    • MD5

      4c7f3bb479587b22bbd2e964aca1ab50

    • SHA1

      6424044d237688b9e9de516de06f605ed9dfd21c

    • SHA256

      f3025c0aaeb6325e1ded42ae5f79a3616768140f5ee326e16cc9bfe18026bb48

    • SHA512

      32de69bb746589077434f346c04865256fe1a15599e3ed9964f928ebc0853268092417bea2b5d7236240ed5b4d34dd7087e0659cff46400c8c93cea6f1b03339

    • SSDEEP

      6144:+pSkwLJrufeODAS72qOisSZRmICxHK6kNdvllcCH:HkWJrufop6lCHkNH

MITRE ATT&CK Enterprise v15

Tasks