General

  • Target

    25bf690af4320c7cb0794cbb3fe3e18ce9c0728e68a81fdca3eaaf5cf5a9e5feN.exe

  • Size

    227KB

  • Sample

    250104-ezlrts1nhs

  • MD5

    8d3fe606e913bb88617a01cf84633770

  • SHA1

    e51356c756ebaac7335c8f8a327fa7db9f9dd2d0

  • SHA256

    25bf690af4320c7cb0794cbb3fe3e18ce9c0728e68a81fdca3eaaf5cf5a9e5fe

  • SHA512

    5416eb100725fca031e58520352c2b97cbb813dd636348ad9c0a5ab31ef11b56c1f9688506ab5de66598066c92763778f3775827551d10b31487825a39c894e9

  • SSDEEP

    6144:lUcxlKhSGoqTecGy9+hAu7//QnSrMhcZEpX:lV8hbTiyqA4QnSQhcZ8X

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      25bf690af4320c7cb0794cbb3fe3e18ce9c0728e68a81fdca3eaaf5cf5a9e5feN.exe

    • Size

      227KB

    • MD5

      8d3fe606e913bb88617a01cf84633770

    • SHA1

      e51356c756ebaac7335c8f8a327fa7db9f9dd2d0

    • SHA256

      25bf690af4320c7cb0794cbb3fe3e18ce9c0728e68a81fdca3eaaf5cf5a9e5fe

    • SHA512

      5416eb100725fca031e58520352c2b97cbb813dd636348ad9c0a5ab31ef11b56c1f9688506ab5de66598066c92763778f3775827551d10b31487825a39c894e9

    • SSDEEP

      6144:lUcxlKhSGoqTecGy9+hAu7//QnSrMhcZEpX:lV8hbTiyqA4QnSQhcZ8X

MITRE ATT&CK Enterprise v15

Tasks