General

  • Target

    e0530fa65f382c4520bd3698092497513e006a7934d29e8854d21c094bdead52

  • Size

    330KB

  • Sample

    250102-gelmfaymhq

  • MD5

    33b98c6a33970365e25ee13a68339c36

  • SHA1

    3bc7fece576e3e46f31284cad7ee6453293d8479

  • SHA256

    e0530fa65f382c4520bd3698092497513e006a7934d29e8854d21c094bdead52

  • SHA512

    a66b0f70eb6d4a24e5be00f90da2c302995f2a8d4efccd9584103ca81b34b3c2e7b5cdefc71c53b65316b8836983020a75477890d8bb22968474287c4d7b321d

  • SSDEEP

    6144:GaCLEhxwqz/Q5lEq20w7bJ8t9Kf+9k3deUuJ/MFW8zJJho:vhyqz0QH7bJ8tw8UU/MpPo

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      e0530fa65f382c4520bd3698092497513e006a7934d29e8854d21c094bdead52

    • Size

      330KB

    • MD5

      33b98c6a33970365e25ee13a68339c36

    • SHA1

      3bc7fece576e3e46f31284cad7ee6453293d8479

    • SHA256

      e0530fa65f382c4520bd3698092497513e006a7934d29e8854d21c094bdead52

    • SHA512

      a66b0f70eb6d4a24e5be00f90da2c302995f2a8d4efccd9584103ca81b34b3c2e7b5cdefc71c53b65316b8836983020a75477890d8bb22968474287c4d7b321d

    • SSDEEP

      6144:GaCLEhxwqz/Q5lEq20w7bJ8t9Kf+9k3deUuJ/MFW8zJJho:vhyqz0QH7bJ8tw8UU/MpPo

MITRE ATT&CK Enterprise v15

Tasks