General

  • Target

    437fd3c01237cb50da91d1f5a85de0612db16666f78b4606c3a147e07f5f4897.exe

  • Size

    259KB

  • Sample

    250108-nlr65azqen

  • MD5

    d4803faf830dceb1af99c7a24fe5ef6a

  • SHA1

    dc4312c4aa76f46404ff1f86c8691689f8a2541a

  • SHA256

    437fd3c01237cb50da91d1f5a85de0612db16666f78b4606c3a147e07f5f4897

  • SHA512

    e84d1050aa6c00a887661819b413646bd588b4b668950b1759e016923f552edf39640aa3b0befb683c5bbf71041c40983f352b2729b586a78e5e5e7ba4da4ecb

  • SSDEEP

    6144:tMThX2hFbGr5t3IMxi5jR0qMqV4m9mDcSbO82Lognr:ohX2/wt4M8sqMqVPmDcCWr

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      437fd3c01237cb50da91d1f5a85de0612db16666f78b4606c3a147e07f5f4897.exe

    • Size

      259KB

    • MD5

      d4803faf830dceb1af99c7a24fe5ef6a

    • SHA1

      dc4312c4aa76f46404ff1f86c8691689f8a2541a

    • SHA256

      437fd3c01237cb50da91d1f5a85de0612db16666f78b4606c3a147e07f5f4897

    • SHA512

      e84d1050aa6c00a887661819b413646bd588b4b668950b1759e016923f552edf39640aa3b0befb683c5bbf71041c40983f352b2729b586a78e5e5e7ba4da4ecb

    • SSDEEP

      6144:tMThX2hFbGr5t3IMxi5jR0qMqV4m9mDcSbO82Lognr:ohX2/wt4M8sqMqVPmDcCWr

MITRE ATT&CK Enterprise v15

Tasks