General

  • Target

    14302b827c2e9b65591483e54e647d51bb5b176911332791cedd7af1be560226

  • Size

    256KB

  • Sample

    250118-zadp5stkex

  • MD5

    6c9946e41131d6e311e8103861ca8107

  • SHA1

    d792eac8d8f32f1ec6aa51dc1c830a174c83bc8c

  • SHA256

    14302b827c2e9b65591483e54e647d51bb5b176911332791cedd7af1be560226

  • SHA512

    42040ba91a5bad561560671dee1cd3a7445fdcf5bcf1cc6643b7fa7584ea83aab9ff16c8d0878e7ecba6f7f6cf98746b621952c17c476c4583cf4b676961b640

  • SSDEEP

    6144:2uX3KDm/ePKTxu/q3yrvpjwzFST68tw8Trx7exH5qRpc:BXQK1cIyrv90STRaZq3c

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      14302b827c2e9b65591483e54e647d51bb5b176911332791cedd7af1be560226

    • Size

      256KB

    • MD5

      6c9946e41131d6e311e8103861ca8107

    • SHA1

      d792eac8d8f32f1ec6aa51dc1c830a174c83bc8c

    • SHA256

      14302b827c2e9b65591483e54e647d51bb5b176911332791cedd7af1be560226

    • SHA512

      42040ba91a5bad561560671dee1cd3a7445fdcf5bcf1cc6643b7fa7584ea83aab9ff16c8d0878e7ecba6f7f6cf98746b621952c17c476c4583cf4b676961b640

    • SSDEEP

      6144:2uX3KDm/ePKTxu/q3yrvpjwzFST68tw8Trx7exH5qRpc:BXQK1cIyrv90STRaZq3c

MITRE ATT&CK Enterprise v15

Tasks