General

  • Target

    cb32998134c29e6306cce8153aff1c8ba29781c46dc67e1f32c6b29c00b7ae6e

  • Size

    208KB

  • Sample

    250116-jhez6szrfr

  • MD5

    24f60b6f05b0a2248a25da56c729175a

  • SHA1

    88462ccedd7157172d14de1a3f43b1d69dfea77d

  • SHA256

    cb32998134c29e6306cce8153aff1c8ba29781c46dc67e1f32c6b29c00b7ae6e

  • SHA512

    de3fe60321e79f112b819dac4697eff4d2dff4cc481735fa5c1201b194b15d84022df25c8df3a2a97c6b230305caf9397ed3ecd38651fc072f53a79dbad1cce6

  • SSDEEP

    6144:1ZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:HquCuygMQjd5vJIBP1p

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      cb32998134c29e6306cce8153aff1c8ba29781c46dc67e1f32c6b29c00b7ae6e

    • Size

      208KB

    • MD5

      24f60b6f05b0a2248a25da56c729175a

    • SHA1

      88462ccedd7157172d14de1a3f43b1d69dfea77d

    • SHA256

      cb32998134c29e6306cce8153aff1c8ba29781c46dc67e1f32c6b29c00b7ae6e

    • SHA512

      de3fe60321e79f112b819dac4697eff4d2dff4cc481735fa5c1201b194b15d84022df25c8df3a2a97c6b230305caf9397ed3ecd38651fc072f53a79dbad1cce6

    • SSDEEP

      6144:1ZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:HquCuygMQjd5vJIBP1p

MITRE ATT&CK Enterprise v15

Tasks