General

  • Target

    62b64d571dbb7d01fb09d2d22487f9bebca12594e7753c1a688d80239f6d5b8e.exe

  • Size

    282KB

  • Sample

    250126-d3sh4ssjfl

  • MD5

    2c3d9d97db351f8cd6228e8667f8d052

  • SHA1

    4e4b867160a715bf916e33e7721d97b5613f1e54

  • SHA256

    62b64d571dbb7d01fb09d2d22487f9bebca12594e7753c1a688d80239f6d5b8e

  • SHA512

    7ff6372df78bc7f9de03c8fabb1f83b38484ff10a272406e3129adc488fa46066cba3f0e841c37a1cf89211639e3eca6d059fe037bbf665adc31864db0ab1512

  • SSDEEP

    6144:NZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:XFTxWYMh5qoLb8LCy9E

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      62b64d571dbb7d01fb09d2d22487f9bebca12594e7753c1a688d80239f6d5b8e.exe

    • Size

      282KB

    • MD5

      2c3d9d97db351f8cd6228e8667f8d052

    • SHA1

      4e4b867160a715bf916e33e7721d97b5613f1e54

    • SHA256

      62b64d571dbb7d01fb09d2d22487f9bebca12594e7753c1a688d80239f6d5b8e

    • SHA512

      7ff6372df78bc7f9de03c8fabb1f83b38484ff10a272406e3129adc488fa46066cba3f0e841c37a1cf89211639e3eca6d059fe037bbf665adc31864db0ab1512

    • SSDEEP

      6144:NZw2TxWX/f48zO7gtwua+Japo5iCb8lseuxw/6YF1M:XFTxWYMh5qoLb8LCy9E

MITRE ATT&CK Enterprise v15

Tasks