General

  • Target

    baf2e4ba357be1ce9ae98ea82693a35d6384997331b39dd186e6bfbb811e11bc

  • Size

    217KB

  • Sample

    250118-k4fdhazlel

  • MD5

    db02ab47da3688a7bc69aac371da0284

  • SHA1

    2eca6aef8d19eb1d41b520bf8af7502482724f73

  • SHA256

    baf2e4ba357be1ce9ae98ea82693a35d6384997331b39dd186e6bfbb811e11bc

  • SHA512

    2e8a65de8b23f7048b6ea9bfc244ce75beefc35f4981a6f4dc14e9b367396cd15416878929fabac8d8ec3995a8c35e3c6a03b412ab3a57e7b3648cc6fcd46f77

  • SSDEEP

    6144:2rRaTyDOnlo7eM+mlkWgRXOqobzWjozm2ulYM6Y:ksTbzu1glovW4EH6Y

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      baf2e4ba357be1ce9ae98ea82693a35d6384997331b39dd186e6bfbb811e11bc

    • Size

      217KB

    • MD5

      db02ab47da3688a7bc69aac371da0284

    • SHA1

      2eca6aef8d19eb1d41b520bf8af7502482724f73

    • SHA256

      baf2e4ba357be1ce9ae98ea82693a35d6384997331b39dd186e6bfbb811e11bc

    • SHA512

      2e8a65de8b23f7048b6ea9bfc244ce75beefc35f4981a6f4dc14e9b367396cd15416878929fabac8d8ec3995a8c35e3c6a03b412ab3a57e7b3648cc6fcd46f77

    • SSDEEP

      6144:2rRaTyDOnlo7eM+mlkWgRXOqobzWjozm2ulYM6Y:ksTbzu1glovW4EH6Y

MITRE ATT&CK Enterprise v15

Tasks