General

  • Target

    d2bda65af2757a6ee977131296e1458d6242197dae75354de29fceff810c3112

  • Size

    211KB

  • Sample

    250101-d4blzstjfy

  • MD5

    09a8232b4699b81ec88ba00cb0c6aac7

  • SHA1

    d713d20abc8d0ed8894b45215732327f499f0c8c

  • SHA256

    d2bda65af2757a6ee977131296e1458d6242197dae75354de29fceff810c3112

  • SHA512

    c1e0d17ba0738a53f8b162ec5071ea745ea7a8bba170dc5dc3d9684659b518f36c2a395a41da0299711572dfbb5f04019f5f16b3323d98fa3dc5821d9366adeb

  • SSDEEP

    3072:lg/T01/NkSp48GzFoMVZrjB2+4M9eOpssvSX4FzU5chdhGulEV5SCmGFkInV/0at:WErGjVqiFPGYrGZMCrCIn6aQdM

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      d2bda65af2757a6ee977131296e1458d6242197dae75354de29fceff810c3112

    • Size

      211KB

    • MD5

      09a8232b4699b81ec88ba00cb0c6aac7

    • SHA1

      d713d20abc8d0ed8894b45215732327f499f0c8c

    • SHA256

      d2bda65af2757a6ee977131296e1458d6242197dae75354de29fceff810c3112

    • SHA512

      c1e0d17ba0738a53f8b162ec5071ea745ea7a8bba170dc5dc3d9684659b518f36c2a395a41da0299711572dfbb5f04019f5f16b3323d98fa3dc5821d9366adeb

    • SSDEEP

      3072:lg/T01/NkSp48GzFoMVZrjB2+4M9eOpssvSX4FzU5chdhGulEV5SCmGFkInV/0at:WErGjVqiFPGYrGZMCrCIn6aQdM

MITRE ATT&CK Enterprise v15

Tasks