General

  • Target

    2994c5ec74db96b5a86153146de2d60fb81ccc2bcd5ff4722a81cf3586afc021.exe

  • Size

    208KB

  • Sample

    250120-hf6vfawqdk

  • MD5

    72ced6d8aa79307bb2bc9d9bdcd67b25

  • SHA1

    ef70a7ba4dff4457ff123adf72a730e32a63c4ce

  • SHA256

    2994c5ec74db96b5a86153146de2d60fb81ccc2bcd5ff4722a81cf3586afc021

  • SHA512

    dec0a21c2c08da7281f1bba6bc469704265aee2082c6aee884ee6da42febc604db5fcc3b1c727300ad95c4ee07fb937beedd4fd1830242cb5522e16499a187ba

  • SSDEEP

    6144:za1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfkA:zbapK0JCmRcU9vVokfZ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      2994c5ec74db96b5a86153146de2d60fb81ccc2bcd5ff4722a81cf3586afc021.exe

    • Size

      208KB

    • MD5

      72ced6d8aa79307bb2bc9d9bdcd67b25

    • SHA1

      ef70a7ba4dff4457ff123adf72a730e32a63c4ce

    • SHA256

      2994c5ec74db96b5a86153146de2d60fb81ccc2bcd5ff4722a81cf3586afc021

    • SHA512

      dec0a21c2c08da7281f1bba6bc469704265aee2082c6aee884ee6da42febc604db5fcc3b1c727300ad95c4ee07fb937beedd4fd1830242cb5522e16499a187ba

    • SSDEEP

      6144:za1oB/yvpK0JCmRcRRR8N0e2kXfCqNidkfkA:zbapK0JCmRcU9vVokfZ

MITRE ATT&CK Enterprise v15

Tasks