General

  • Target

    83b9c68eef5d448a31a604b2f82e7f066991c30a75c24ae96364aa985299bb48N.exe

  • Size

    218KB

  • Sample

    250205-mgpd1asmat

  • MD5

    96e0f884f678e5d1eb9a4c3510eba970

  • SHA1

    6c810af7e17f0dc66dccb3836ad745b952ff77fa

  • SHA256

    83b9c68eef5d448a31a604b2f82e7f066991c30a75c24ae96364aa985299bb48

  • SHA512

    6d825c859acbd295964e8caea9a9170ad506bfd2a2a98fe55765b1278475bbc27a5d129db73323f3736ad80f9d06654ec722171cbd451d7bf8a7ef85198dee11

  • SSDEEP

    6144:OEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICW:OEGDdQNHEwWlMxYG/wIR

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      83b9c68eef5d448a31a604b2f82e7f066991c30a75c24ae96364aa985299bb48N.exe

    • Size

      218KB

    • MD5

      96e0f884f678e5d1eb9a4c3510eba970

    • SHA1

      6c810af7e17f0dc66dccb3836ad745b952ff77fa

    • SHA256

      83b9c68eef5d448a31a604b2f82e7f066991c30a75c24ae96364aa985299bb48

    • SHA512

      6d825c859acbd295964e8caea9a9170ad506bfd2a2a98fe55765b1278475bbc27a5d129db73323f3736ad80f9d06654ec722171cbd451d7bf8a7ef85198dee11

    • SSDEEP

      6144:OEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICW:OEGDdQNHEwWlMxYG/wIR

MITRE ATT&CK Enterprise v15

Tasks