General

  • Target

    5091b846369e0fc2b3cfaad6626a8b6b8aa075c014e5da0182983ff6ddd9862a.exe

  • Size

    204KB

  • Sample

    250127-k5hj9a1mh1

  • MD5

    7623f96e356c6d2bd2db94c7da7dba47

  • SHA1

    0c2ecf98bc135be8edaef412271c52d1162c5fa2

  • SHA256

    5091b846369e0fc2b3cfaad6626a8b6b8aa075c014e5da0182983ff6ddd9862a

  • SHA512

    571ba6117f70e3ff31196de34db8185ce3c50dbb98144580050f3501423b0e5e869dd4499d7011159fb889af6b8232f4d22d4eccf890322d873843159459980e

  • SSDEEP

    3072:T5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlA4:TLexkuRaX41xoyJV65gzyZko+ucp

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      5091b846369e0fc2b3cfaad6626a8b6b8aa075c014e5da0182983ff6ddd9862a.exe

    • Size

      204KB

    • MD5

      7623f96e356c6d2bd2db94c7da7dba47

    • SHA1

      0c2ecf98bc135be8edaef412271c52d1162c5fa2

    • SHA256

      5091b846369e0fc2b3cfaad6626a8b6b8aa075c014e5da0182983ff6ddd9862a

    • SHA512

      571ba6117f70e3ff31196de34db8185ce3c50dbb98144580050f3501423b0e5e869dd4499d7011159fb889af6b8232f4d22d4eccf890322d873843159459980e

    • SSDEEP

      3072:T5u7yT4TVbkuRaX1w71jnRkCoyJTarYWbV+HOFxg+z1WxJsqWkoyjOowUVl/TlA4:TLexkuRaX41xoyJV65gzyZko+ucp

MITRE ATT&CK Enterprise v15

Tasks