General

  • Target

    89d463b6213e9e59ea08d6a45e11a51bc54f6fb9418f15a60efab9fcf0f069dbN.exe

  • Size

    204KB

  • Sample

    250124-twh9vsylen

  • MD5

    f25ee75d9d8ba320b203b631cd5b3840

  • SHA1

    e4d57ee964304c5f9908bd4eb376f996dea21a9b

  • SHA256

    89d463b6213e9e59ea08d6a45e11a51bc54f6fb9418f15a60efab9fcf0f069db

  • SHA512

    0214e467f922ff0066fe82713a3fe60a84833a1cf18fa5d061283a854e1ed7455036068f48523a81f5ec6c5b2903213368f65c38a43576f83ae5c0a346a95c3d

  • SSDEEP

    3072:c5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlAQ:cLexkuRaX41xoyJV65gzyZko+uc

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      89d463b6213e9e59ea08d6a45e11a51bc54f6fb9418f15a60efab9fcf0f069dbN.exe

    • Size

      204KB

    • MD5

      f25ee75d9d8ba320b203b631cd5b3840

    • SHA1

      e4d57ee964304c5f9908bd4eb376f996dea21a9b

    • SHA256

      89d463b6213e9e59ea08d6a45e11a51bc54f6fb9418f15a60efab9fcf0f069db

    • SHA512

      0214e467f922ff0066fe82713a3fe60a84833a1cf18fa5d061283a854e1ed7455036068f48523a81f5ec6c5b2903213368f65c38a43576f83ae5c0a346a95c3d

    • SSDEEP

      3072:c5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlAQ:cLexkuRaX41xoyJV65gzyZko+uc

MITRE ATT&CK Enterprise v15

Tasks