General

  • Target

    8e21cab3b1a4e991f7e6dd85d94fb7d999f0ed07475e66633bd48c6aa2f4cdb0N.exe

  • Size

    227KB

  • Sample

    250111-el5yjsvren

  • MD5

    2484e861bd23efa2364ff1427ae748c0

  • SHA1

    75e51f78af165260a12840b0bcbc1bffc2a2b25d

  • SHA256

    8e21cab3b1a4e991f7e6dd85d94fb7d999f0ed07475e66633bd48c6aa2f4cdb0

  • SHA512

    1ffe04467b202171b2bed08de61eda9149f264fec130e11fcfb26e139ba323198b9e9f4fa6cb2923e00ca60ca127215c903d38eb3d0883740fb1a5039dc7963a

  • SSDEEP

    6144:1UcxlKhSGoqTecGy9+hAu7//QnSrMhcZEpX:1V8hbTiyqA4QnSQhcZ8X

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      8e21cab3b1a4e991f7e6dd85d94fb7d999f0ed07475e66633bd48c6aa2f4cdb0N.exe

    • Size

      227KB

    • MD5

      2484e861bd23efa2364ff1427ae748c0

    • SHA1

      75e51f78af165260a12840b0bcbc1bffc2a2b25d

    • SHA256

      8e21cab3b1a4e991f7e6dd85d94fb7d999f0ed07475e66633bd48c6aa2f4cdb0

    • SHA512

      1ffe04467b202171b2bed08de61eda9149f264fec130e11fcfb26e139ba323198b9e9f4fa6cb2923e00ca60ca127215c903d38eb3d0883740fb1a5039dc7963a

    • SSDEEP

      6144:1UcxlKhSGoqTecGy9+hAu7//QnSrMhcZEpX:1V8hbTiyqA4QnSQhcZ8X

MITRE ATT&CK Enterprise v15

Tasks