General

  • Target

    3ca75b8c8281ea1abb41bb7cd858621a15b394290360eacf62d725df956be3d6.exe

  • Size

    600KB

  • Sample

    250108-nf4yqsxqas

  • MD5

    4c2327e22a41948aec4f84930ad7161d

  • SHA1

    732520960b36ef9b8d9f9374e43e32913c575f7c

  • SHA256

    3ca75b8c8281ea1abb41bb7cd858621a15b394290360eacf62d725df956be3d6

  • SHA512

    11915584f922e9c310ae5f880714af4c46b103cd6bd50dc4ebaee5821c28449319f337dd3f8c5a3a17ba72ff34992159ad5eb4db2e74aa9530d3711d03f541d1

  • SSDEEP

    12288:CwmWTR1arYnEKosuzY34CZ3DQvSkNL9qyFhJy56d/eoyXjn9Wy:CwmyRcrYnxUzY3NZ3DQvZNL9X7Zyz9Wy

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      3ca75b8c8281ea1abb41bb7cd858621a15b394290360eacf62d725df956be3d6.exe

    • Size

      600KB

    • MD5

      4c2327e22a41948aec4f84930ad7161d

    • SHA1

      732520960b36ef9b8d9f9374e43e32913c575f7c

    • SHA256

      3ca75b8c8281ea1abb41bb7cd858621a15b394290360eacf62d725df956be3d6

    • SHA512

      11915584f922e9c310ae5f880714af4c46b103cd6bd50dc4ebaee5821c28449319f337dd3f8c5a3a17ba72ff34992159ad5eb4db2e74aa9530d3711d03f541d1

    • SSDEEP

      12288:CwmWTR1arYnEKosuzY34CZ3DQvSkNL9qyFhJy56d/eoyXjn9Wy:CwmyRcrYnxUzY3NZ3DQvZNL9X7Zyz9Wy

MITRE ATT&CK Enterprise v15

Tasks