General

  • Target

    2f5f7fa17cadb76fd5d27e07e5369b0cda3e275c92a20be681cac102ccb524b4

  • Size

    218KB

  • Sample

    250108-1wjzqaxpdm

  • MD5

    e14685299f395ed7d429180d41e81e13

  • SHA1

    3692c9bb4094be1a8c4104219022d88042bacd0a

  • SHA256

    2f5f7fa17cadb76fd5d27e07e5369b0cda3e275c92a20be681cac102ccb524b4

  • SHA512

    c2b7f1a96a1932bed3a108109aaf76f921923ec7737106dd8f40c8c92ef8229da41ea8d771490784dd0a0335056a2caf610f9b57c5786c3ff35b91c6d01ec420

  • SSDEEP

    3072:Wvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:I1SyAJp6rjn1gOObn4b6h9h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      2f5f7fa17cadb76fd5d27e07e5369b0cda3e275c92a20be681cac102ccb524b4

    • Size

      218KB

    • MD5

      e14685299f395ed7d429180d41e81e13

    • SHA1

      3692c9bb4094be1a8c4104219022d88042bacd0a

    • SHA256

      2f5f7fa17cadb76fd5d27e07e5369b0cda3e275c92a20be681cac102ccb524b4

    • SHA512

      c2b7f1a96a1932bed3a108109aaf76f921923ec7737106dd8f40c8c92ef8229da41ea8d771490784dd0a0335056a2caf610f9b57c5786c3ff35b91c6d01ec420

    • SSDEEP

      3072:Wvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:I1SyAJp6rjn1gOObn4b6h9h

MITRE ATT&CK Enterprise v15

Tasks