General

  • Target

    70705172696d9e2fc3f097fad59f445b4f9fa2521cf08d4bff6b1ea247964d6a

  • Size

    264KB

  • Sample

    250205-ac233syqgs

  • MD5

    8cffb06bb0434cda5c42a54ebd2abdd5

  • SHA1

    090a64be39c46f0ceec94a9be47f520c2a99ce82

  • SHA256

    70705172696d9e2fc3f097fad59f445b4f9fa2521cf08d4bff6b1ea247964d6a

  • SHA512

    12edb6c901b5fc6679db46174e81e9c98bdcc0b867aa140eb61a5c5330a8f3290ea1a158489a7ea2cb412a12f60eb4505fb62a176403ba6a2f93df7a703d84d7

  • SSDEEP

    6144:jrlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:foZ8qpUwufw8T6XLNhcwHWntbbK

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      70705172696d9e2fc3f097fad59f445b4f9fa2521cf08d4bff6b1ea247964d6a

    • Size

      264KB

    • MD5

      8cffb06bb0434cda5c42a54ebd2abdd5

    • SHA1

      090a64be39c46f0ceec94a9be47f520c2a99ce82

    • SHA256

      70705172696d9e2fc3f097fad59f445b4f9fa2521cf08d4bff6b1ea247964d6a

    • SHA512

      12edb6c901b5fc6679db46174e81e9c98bdcc0b867aa140eb61a5c5330a8f3290ea1a158489a7ea2cb412a12f60eb4505fb62a176403ba6a2f93df7a703d84d7

    • SSDEEP

      6144:jrlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:foZ8qpUwufw8T6XLNhcwHWntbbK

MITRE ATT&CK Enterprise v15

Tasks