General

  • Target

    7428d92765c1917aad7cc856c5b00dcef28ee1ce97e2a106b06a7aa026a94f34.exe

  • Size

    218KB

  • Sample

    250107-w54y2atjas

  • MD5

    c164fea5774a5e7c18e38f9a08bf2e9d

  • SHA1

    3c9552c53df613fc6ee7d22ebe822ed07dcc3e36

  • SHA256

    7428d92765c1917aad7cc856c5b00dcef28ee1ce97e2a106b06a7aa026a94f34

  • SHA512

    8a23d30d8481bd61579e525236e6990b267a5d1f6b83d56d07cd098cbb0aef3f43c8e4cacd14a5e3cecee02dd4f4ad9cd6d2f360083e5b62d2d7351de9fbdbe9

  • SSDEEP

    6144:HEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICG:HEGDdQNHEwWlMxYG/wIJ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      7428d92765c1917aad7cc856c5b00dcef28ee1ce97e2a106b06a7aa026a94f34.exe

    • Size

      218KB

    • MD5

      c164fea5774a5e7c18e38f9a08bf2e9d

    • SHA1

      3c9552c53df613fc6ee7d22ebe822ed07dcc3e36

    • SHA256

      7428d92765c1917aad7cc856c5b00dcef28ee1ce97e2a106b06a7aa026a94f34

    • SHA512

      8a23d30d8481bd61579e525236e6990b267a5d1f6b83d56d07cd098cbb0aef3f43c8e4cacd14a5e3cecee02dd4f4ad9cd6d2f360083e5b62d2d7351de9fbdbe9

    • SSDEEP

      6144:HEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICG:HEGDdQNHEwWlMxYG/wIJ

MITRE ATT&CK Enterprise v15

Tasks