General

  • Target

    948492f5a81fa71ca90b10134226d7f4ce18fc741deef93553cd798ff3e346be.exe

  • Size

    218KB

  • Sample

    250120-p53mmszngq

  • MD5

    dfb872e9fa45f8ca263a517d3e9e1f8a

  • SHA1

    e8cc28ee7ca56055f6bb08c6763de0f45398996a

  • SHA256

    948492f5a81fa71ca90b10134226d7f4ce18fc741deef93553cd798ff3e346be

  • SHA512

    c2792389b38fbc93048864f370e199375913ca88b2df515d4b83e43e12b485bded0a06db2f41fba9075f574d3fea85325442e81df6e20195eea3b01efdc4fada

  • SSDEEP

    6144:5EQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICS:5EGDdQNHEwWlMxYG/wID

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      948492f5a81fa71ca90b10134226d7f4ce18fc741deef93553cd798ff3e346be.exe

    • Size

      218KB

    • MD5

      dfb872e9fa45f8ca263a517d3e9e1f8a

    • SHA1

      e8cc28ee7ca56055f6bb08c6763de0f45398996a

    • SHA256

      948492f5a81fa71ca90b10134226d7f4ce18fc741deef93553cd798ff3e346be

    • SHA512

      c2792389b38fbc93048864f370e199375913ca88b2df515d4b83e43e12b485bded0a06db2f41fba9075f574d3fea85325442e81df6e20195eea3b01efdc4fada

    • SSDEEP

      6144:5EQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICS:5EGDdQNHEwWlMxYG/wID

MITRE ATT&CK Enterprise v15

Tasks