General

  • Target

    16bebc908b8eac78209ca272f6d91893a2971f6d601411ab342ceef7ebe128e1N

  • Size

    208KB

  • Sample

    250113-vhaw1askaq

  • MD5

    d543cb1812c9bc4248d651ff04dc0840

  • SHA1

    4a2c525d6ccf2c7037b6f107668d1a61b0589356

  • SHA256

    16bebc908b8eac78209ca272f6d91893a2971f6d601411ab342ceef7ebe128e1

  • SHA512

    df9719027b658b2a2db231e06a68a58ed1af775d7b5f7cb1fac137d8d5d588c0e76a6705669cf2c7abe2e4025f14c22acbd1c42cfd98b6e7a72cf73cac248eac

  • SSDEEP

    6144:ta1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfk:tbapK0JCmRcU9vVokf

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      16bebc908b8eac78209ca272f6d91893a2971f6d601411ab342ceef7ebe128e1N

    • Size

      208KB

    • MD5

      d543cb1812c9bc4248d651ff04dc0840

    • SHA1

      4a2c525d6ccf2c7037b6f107668d1a61b0589356

    • SHA256

      16bebc908b8eac78209ca272f6d91893a2971f6d601411ab342ceef7ebe128e1

    • SHA512

      df9719027b658b2a2db231e06a68a58ed1af775d7b5f7cb1fac137d8d5d588c0e76a6705669cf2c7abe2e4025f14c22acbd1c42cfd98b6e7a72cf73cac248eac

    • SSDEEP

      6144:ta1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfk:tbapK0JCmRcU9vVokf

MITRE ATT&CK Enterprise v15

Tasks