General

  • Target

    a6aace7b33a30c369b822426c1fba413bee4ac270aeb4bb88c0c7a69f5b0982d

  • Size

    217KB

  • Sample

    250103-cl8ckavnay

  • MD5

    bfa745b75a86416be496080c7eb199da

  • SHA1

    c665ae02bcda25e6f322cc805833c5a90f3f0791

  • SHA256

    a6aace7b33a30c369b822426c1fba413bee4ac270aeb4bb88c0c7a69f5b0982d

  • SHA512

    42089d4c07432c6561b52e45ea3d6c2eb0d466467e772d10a601c3af488210d25a87e9313b43d130e86b3baefab4f820fa7d96d09a0675f306008819889d263b

  • SSDEEP

    6144:trRaTyDOnlo7eM+mlkWgRXOqobzWjozm2ulYM6Y:dsTbzu1glovW4EH6Y

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      a6aace7b33a30c369b822426c1fba413bee4ac270aeb4bb88c0c7a69f5b0982d

    • Size

      217KB

    • MD5

      bfa745b75a86416be496080c7eb199da

    • SHA1

      c665ae02bcda25e6f322cc805833c5a90f3f0791

    • SHA256

      a6aace7b33a30c369b822426c1fba413bee4ac270aeb4bb88c0c7a69f5b0982d

    • SHA512

      42089d4c07432c6561b52e45ea3d6c2eb0d466467e772d10a601c3af488210d25a87e9313b43d130e86b3baefab4f820fa7d96d09a0675f306008819889d263b

    • SSDEEP

      6144:trRaTyDOnlo7eM+mlkWgRXOqobzWjozm2ulYM6Y:dsTbzu1glovW4EH6Y

MITRE ATT&CK Enterprise v15

Tasks