General

  • Target

    25dcb56615ed28457721d23dd093b3e481ad7fe87b0a8d7719d600d933eb6d84

  • Size

    212KB

  • Sample

    250110-1cn5bsykcx

  • MD5

    e3214e660e2c015f50d0a17b315253df

  • SHA1

    7518a2518629a0ac151a11c5dc6d6c1f5ea7548c

  • SHA256

    25dcb56615ed28457721d23dd093b3e481ad7fe87b0a8d7719d600d933eb6d84

  • SHA512

    f24f23ca7cd891545c4f668560c262cc840158f8761cb44e269e34f1dd677e0b7f9c4840a087bd1e95e4bcbd6f1ff552d8792ae83810d750f07497655a9f8a9f

  • SSDEEP

    6144:Yob34ERMS/H7YAVsobrVn5G4E3Hi96mbQzJWFO8Omw4GZ:HboEj/8ASWM4Ki96/zqIKGZ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      25dcb56615ed28457721d23dd093b3e481ad7fe87b0a8d7719d600d933eb6d84

    • Size

      212KB

    • MD5

      e3214e660e2c015f50d0a17b315253df

    • SHA1

      7518a2518629a0ac151a11c5dc6d6c1f5ea7548c

    • SHA256

      25dcb56615ed28457721d23dd093b3e481ad7fe87b0a8d7719d600d933eb6d84

    • SHA512

      f24f23ca7cd891545c4f668560c262cc840158f8761cb44e269e34f1dd677e0b7f9c4840a087bd1e95e4bcbd6f1ff552d8792ae83810d750f07497655a9f8a9f

    • SSDEEP

      6144:Yob34ERMS/H7YAVsobrVn5G4E3Hi96mbQzJWFO8Omw4GZ:HboEj/8ASWM4Ki96/zqIKGZ

MITRE ATT&CK Enterprise v15

Tasks