General

  • Target

    eb14a1f39223403bc1fbeb0335a14512d3f1b66fb773c66d828600e86af57797.exe

  • Size

    213KB

  • Sample

    250121-1k4vrasphp

  • MD5

    649e350626937388735a38b6b19cf8dd

  • SHA1

    8a7883005e616a99c553f47219ef79eda4358a37

  • SHA256

    eb14a1f39223403bc1fbeb0335a14512d3f1b66fb773c66d828600e86af57797

  • SHA512

    b20782978489b39e8c83ac3d38f326be5e77076cc56df4a9f346ba9be9318ad04170696009815fb05142c97cb1776bb43af37e12a94456382869dbf946367fdc

  • SSDEEP

    6144:EQfbXnEreyARNf+fIfvEEDi3EJ3FzbPotDyK:TXkej+f4VDOEVdbgtH

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      eb14a1f39223403bc1fbeb0335a14512d3f1b66fb773c66d828600e86af57797.exe

    • Size

      213KB

    • MD5

      649e350626937388735a38b6b19cf8dd

    • SHA1

      8a7883005e616a99c553f47219ef79eda4358a37

    • SHA256

      eb14a1f39223403bc1fbeb0335a14512d3f1b66fb773c66d828600e86af57797

    • SHA512

      b20782978489b39e8c83ac3d38f326be5e77076cc56df4a9f346ba9be9318ad04170696009815fb05142c97cb1776bb43af37e12a94456382869dbf946367fdc

    • SSDEEP

      6144:EQfbXnEreyARNf+fIfvEEDi3EJ3FzbPotDyK:TXkej+f4VDOEVdbgtH

MITRE ATT&CK Enterprise v15

Tasks