General

  • Target

    f2ac02de600ae28be320bf83d96d648c3a2bac0433dea98f37d46fa4b538afcaN.exe

  • Size

    208KB

  • Sample

    250103-pp8hyswrcr

  • MD5

    8cdcb923c4283ab8c5484ec581fd88b0

  • SHA1

    264d62c3adce571af8eb288ea89a5d8767d1eda6

  • SHA256

    f2ac02de600ae28be320bf83d96d648c3a2bac0433dea98f37d46fa4b538afca

  • SHA512

    53c0894e31c4dbb7cbd4b10eb2028bba372871f8bc8029b274c5761dffb61bb42e67bc98a68f999aefe7b1049373a6038c0984b2a4f7cd2f1fabc4edf6584d25

  • SSDEEP

    6144:aa1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfk:abapK0JCmRcU9vVokf

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      f2ac02de600ae28be320bf83d96d648c3a2bac0433dea98f37d46fa4b538afcaN.exe

    • Size

      208KB

    • MD5

      8cdcb923c4283ab8c5484ec581fd88b0

    • SHA1

      264d62c3adce571af8eb288ea89a5d8767d1eda6

    • SHA256

      f2ac02de600ae28be320bf83d96d648c3a2bac0433dea98f37d46fa4b538afca

    • SHA512

      53c0894e31c4dbb7cbd4b10eb2028bba372871f8bc8029b274c5761dffb61bb42e67bc98a68f999aefe7b1049373a6038c0984b2a4f7cd2f1fabc4edf6584d25

    • SSDEEP

      6144:aa1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfk:abapK0JCmRcU9vVokf

MITRE ATT&CK Enterprise v15

Tasks