General

  • Target

    69a6b092b83923d914f7ffe39cebee7c6d5133ef8a17c50a74c407ca8c405e8c

  • Size

    204KB

  • Sample

    250125-bfcs2axnes

  • MD5

    ffb27193559cc2024c581c418723cf19

  • SHA1

    680d56970a4b03028451421fd1d1071293c1d287

  • SHA256

    69a6b092b83923d914f7ffe39cebee7c6d5133ef8a17c50a74c407ca8c405e8c

  • SHA512

    6d31808155d7eb221a7fdf7e2847194d37fdb0d5b18889d075428e6fac9369e2ad9d99dafa9ce5685143d81ac15f3a12911600c16a84f754f30ef7421ae3141e

  • SSDEEP

    3072:d5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlA4:dLexkuRaX41xoyJV65gzyZko+ucZ

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      69a6b092b83923d914f7ffe39cebee7c6d5133ef8a17c50a74c407ca8c405e8c

    • Size

      204KB

    • MD5

      ffb27193559cc2024c581c418723cf19

    • SHA1

      680d56970a4b03028451421fd1d1071293c1d287

    • SHA256

      69a6b092b83923d914f7ffe39cebee7c6d5133ef8a17c50a74c407ca8c405e8c

    • SHA512

      6d31808155d7eb221a7fdf7e2847194d37fdb0d5b18889d075428e6fac9369e2ad9d99dafa9ce5685143d81ac15f3a12911600c16a84f754f30ef7421ae3141e

    • SSDEEP

      3072:d5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlA4:dLexkuRaX41xoyJV65gzyZko+ucZ

MITRE ATT&CK Enterprise v15

Tasks