General

  • Target

    3690eff29a70497eac2c750caa5b49634c2afa1285a49bab301b6af1dbbd9276.exe

  • Size

    257KB

  • Sample

    250121-g6fkhazran

  • MD5

    f249dcd152cc38bc4f65bfd3ed3110a6

  • SHA1

    bb893f30907a2bab2fc0c60d8a8dcdd99e6fde92

  • SHA256

    3690eff29a70497eac2c750caa5b49634c2afa1285a49bab301b6af1dbbd9276

  • SHA512

    4ccfa9b59c90743f11b609122da302e159c81cee4b1890e5be7302296ce219504c61147838de180ca8196819b4534378516f1bd325b11baef1ab1153200b6786

  • SSDEEP

    6144:mdZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:GkODuHyseYW2IzT4R3ht7Mx

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      3690eff29a70497eac2c750caa5b49634c2afa1285a49bab301b6af1dbbd9276.exe

    • Size

      257KB

    • MD5

      f249dcd152cc38bc4f65bfd3ed3110a6

    • SHA1

      bb893f30907a2bab2fc0c60d8a8dcdd99e6fde92

    • SHA256

      3690eff29a70497eac2c750caa5b49634c2afa1285a49bab301b6af1dbbd9276

    • SHA512

      4ccfa9b59c90743f11b609122da302e159c81cee4b1890e5be7302296ce219504c61147838de180ca8196819b4534378516f1bd325b11baef1ab1153200b6786

    • SSDEEP

      6144:mdZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:GkODuHyseYW2IzT4R3ht7Mx

MITRE ATT&CK Enterprise v15

Tasks