General

  • Target

    b8463708561eb05786916798ad24914b8842e07b93fb8570e782a9f5858f78ad

  • Size

    1.0MB

  • Sample

    250105-fasdra1rgt

  • MD5

    e3e8e2112441a5cf9e19e812d4b57acf

  • SHA1

    951ee91b3777a8b2636d485b7ed25c3bcd47c6b4

  • SHA256

    b8463708561eb05786916798ad24914b8842e07b93fb8570e782a9f5858f78ad

  • SHA512

    364ae8a20074b68f9e7b040d8279583a4619c842e5c2f487394d4a7bcad463e30616e788e8180976614622bc88d699a3d8d76257d8ab418357a153cf0d3cdf65

  • SSDEEP

    24576:dmUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT58:dmV2ApemV2ApemV2Ap8

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      b8463708561eb05786916798ad24914b8842e07b93fb8570e782a9f5858f78ad

    • Size

      1.0MB

    • MD5

      e3e8e2112441a5cf9e19e812d4b57acf

    • SHA1

      951ee91b3777a8b2636d485b7ed25c3bcd47c6b4

    • SHA256

      b8463708561eb05786916798ad24914b8842e07b93fb8570e782a9f5858f78ad

    • SHA512

      364ae8a20074b68f9e7b040d8279583a4619c842e5c2f487394d4a7bcad463e30616e788e8180976614622bc88d699a3d8d76257d8ab418357a153cf0d3cdf65

    • SSDEEP

      24576:dmUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT5emUNJyJqb1FcMap2ATT58:dmV2ApemV2ApemV2Ap8

MITRE ATT&CK Enterprise v15

Tasks