General

  • Target

    4145660599187d6596c95cc38473244203b6c1180c83297c4f47631f6bcdde61N.exe

  • Size

    217KB

  • Sample

    250120-d3vcpszkar

  • MD5

    e90fafb9e81b2734769e4b96f8b24e90

  • SHA1

    f6f734feed08bf4835109b12b4033e6ffe019c6a

  • SHA256

    4145660599187d6596c95cc38473244203b6c1180c83297c4f47631f6bcdde61

  • SHA512

    44c77092b52b54e5bfd25bc6689f8d9764dbf8eebab36a9e9c543836d073023d3495d1d623b846c71622b97ffd1c20ca084918907cbe1b6e15a7b8efdd9f01bc

  • SSDEEP

    6144:1nyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXb5:WEdp8csKpE7XXo

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      4145660599187d6596c95cc38473244203b6c1180c83297c4f47631f6bcdde61N.exe

    • Size

      217KB

    • MD5

      e90fafb9e81b2734769e4b96f8b24e90

    • SHA1

      f6f734feed08bf4835109b12b4033e6ffe019c6a

    • SHA256

      4145660599187d6596c95cc38473244203b6c1180c83297c4f47631f6bcdde61

    • SHA512

      44c77092b52b54e5bfd25bc6689f8d9764dbf8eebab36a9e9c543836d073023d3495d1d623b846c71622b97ffd1c20ca084918907cbe1b6e15a7b8efdd9f01bc

    • SSDEEP

      6144:1nyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXb5:WEdp8csKpE7XXo

MITRE ATT&CK Enterprise v15

Tasks