General

  • Target

    3d160a6b79307ba823c813626cb8138f46d78484ae7aa434e12c62685472bbb9N.exe

  • Size

    286KB

  • Sample

    250107-s3wcbsxlcs

  • MD5

    6d9122ae89106680b136784115a21a40

  • SHA1

    f4089a6202654b2ab55750d9a0b28214007274f5

  • SHA256

    3d160a6b79307ba823c813626cb8138f46d78484ae7aa434e12c62685472bbb9

  • SHA512

    218e6d21c83f1f773cd0977aef9fd53c7d20aaad09ce1787e49ebe01299278a09fd98f16eace6aedf4f8f057b9c51c187fa3f78f11c0bf8b7f3692756a2381c6

  • SSDEEP

    6144:upCMA2I4jLB4lpNmmPUAMWJ8cgserpy2MSEtQODfPvKqDQbIx27:CAMw3pUTfckhkQ+3vKhbIM7

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      3d160a6b79307ba823c813626cb8138f46d78484ae7aa434e12c62685472bbb9N.exe

    • Size

      286KB

    • MD5

      6d9122ae89106680b136784115a21a40

    • SHA1

      f4089a6202654b2ab55750d9a0b28214007274f5

    • SHA256

      3d160a6b79307ba823c813626cb8138f46d78484ae7aa434e12c62685472bbb9

    • SHA512

      218e6d21c83f1f773cd0977aef9fd53c7d20aaad09ce1787e49ebe01299278a09fd98f16eace6aedf4f8f057b9c51c187fa3f78f11c0bf8b7f3692756a2381c6

    • SSDEEP

      6144:upCMA2I4jLB4lpNmmPUAMWJ8cgserpy2MSEtQODfPvKqDQbIx27:CAMw3pUTfckhkQ+3vKhbIM7

MITRE ATT&CK Enterprise v15

Tasks