General

  • Target

    6ebbeb9b18aea982cb23ac6edac3f678417436e9757526faaab85b4ddd2e9b1cN.exe

  • Size

    218KB

  • Sample

    250120-rbqr4aspbr

  • MD5

    94ee161e4486476e0b4b62bbada90bc0

  • SHA1

    d0ea99ce63c36de5143a966bd7668c6fffc451e5

  • SHA256

    6ebbeb9b18aea982cb23ac6edac3f678417436e9757526faaab85b4ddd2e9b1c

  • SHA512

    53561d5e087c0754731731b4156fed8efb666d33bf8d7b803b03edfe26b33b9f19fcbfad0c163a4c193576fc41f221cb32a9976c87c1cf69e20ebd9363f63be6

  • SSDEEP

    3072:Lvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:T1SyAJp6rjn1gOObn4b6h9h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      6ebbeb9b18aea982cb23ac6edac3f678417436e9757526faaab85b4ddd2e9b1cN.exe

    • Size

      218KB

    • MD5

      94ee161e4486476e0b4b62bbada90bc0

    • SHA1

      d0ea99ce63c36de5143a966bd7668c6fffc451e5

    • SHA256

      6ebbeb9b18aea982cb23ac6edac3f678417436e9757526faaab85b4ddd2e9b1c

    • SHA512

      53561d5e087c0754731731b4156fed8efb666d33bf8d7b803b03edfe26b33b9f19fcbfad0c163a4c193576fc41f221cb32a9976c87c1cf69e20ebd9363f63be6

    • SSDEEP

      3072:Lvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:T1SyAJp6rjn1gOObn4b6h9h

MITRE ATT&CK Enterprise v15

Tasks