General

  • Target

    b954eed834252c01409bd76fc10e2b2ba31c41e5c0c14a47a5c5d9e1129f227c.exe

  • Size

    329KB

  • Sample

    250116-klqfra1rex

  • MD5

    b24db85774f9266ebb316ab622e3efce

  • SHA1

    36009954b8a9f10122916537fa00a821bac8e2ba

  • SHA256

    b954eed834252c01409bd76fc10e2b2ba31c41e5c0c14a47a5c5d9e1129f227c

  • SHA512

    f19f7ce195598ed0ddb57bb3cb9f198e5a34675ed8b9af70e464cbdbd44fa2e26f4fd9f0e90db899c8dd12c0ebcaeddd859d3122eee271439732f3025f4a8f77

  • SSDEEP

    6144:RmWhxR1arY/PbgmFOabPIIBhJXAv7eTY9suz0xhttGSrDKE3KIvSka8b3B:RmWTR1arYnEKosuzY34CZ3DvSkNF

Score
10/10

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      b954eed834252c01409bd76fc10e2b2ba31c41e5c0c14a47a5c5d9e1129f227c.exe

    • Size

      329KB

    • MD5

      b24db85774f9266ebb316ab622e3efce

    • SHA1

      36009954b8a9f10122916537fa00a821bac8e2ba

    • SHA256

      b954eed834252c01409bd76fc10e2b2ba31c41e5c0c14a47a5c5d9e1129f227c

    • SHA512

      f19f7ce195598ed0ddb57bb3cb9f198e5a34675ed8b9af70e464cbdbd44fa2e26f4fd9f0e90db899c8dd12c0ebcaeddd859d3122eee271439732f3025f4a8f77

    • SSDEEP

      6144:RmWhxR1arY/PbgmFOabPIIBhJXAv7eTY9suz0xhttGSrDKE3KIvSka8b3B:RmWTR1arYnEKosuzY34CZ3DvSkNF

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks