General

  • Target

    1767b0faa15fc3257ba0bc33973898e5c5871b7a3027047c473be93e21e34eda.exe

  • Size

    218KB

  • Sample

    250124-nhpltsxmak

  • MD5

    22368b87e6644a30b9d77bd8991e2cfb

  • SHA1

    93900cf8d11f4f0633123e8df105d637d0f5c1d7

  • SHA256

    1767b0faa15fc3257ba0bc33973898e5c5871b7a3027047c473be93e21e34eda

  • SHA512

    283c6769b601bc894b36fdef01518182d76e6baa6732be43d704cd5ba7acb8d8bd7255974f28d74d80ef10731029c3a0ed8d4ea95625d6e2c7c7c9538ed55e1a

  • SSDEEP

    6144:GEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICW:GEGDdQNHEwWlMxYG/wIR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      1767b0faa15fc3257ba0bc33973898e5c5871b7a3027047c473be93e21e34eda.exe

    • Size

      218KB

    • MD5

      22368b87e6644a30b9d77bd8991e2cfb

    • SHA1

      93900cf8d11f4f0633123e8df105d637d0f5c1d7

    • SHA256

      1767b0faa15fc3257ba0bc33973898e5c5871b7a3027047c473be93e21e34eda

    • SHA512

      283c6769b601bc894b36fdef01518182d76e6baa6732be43d704cd5ba7acb8d8bd7255974f28d74d80ef10731029c3a0ed8d4ea95625d6e2c7c7c9538ed55e1a

    • SSDEEP

      6144:GEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICW:GEGDdQNHEwWlMxYG/wIR

MITRE ATT&CK Enterprise v15

Tasks