General

  • Target

    0f6816d7e70c38dc1ee2cd9efd7db462c2c3e09e805d32e9be8644cbae79d104

  • Size

    260KB

  • Sample

    250207-ypds1swpap

  • MD5

    a73c2a43a5dd9322188a8025c0303cbc

  • SHA1

    7a426b0c7d16fdb0634853ec4d02a9b93d19e240

  • SHA256

    0f6816d7e70c38dc1ee2cd9efd7db462c2c3e09e805d32e9be8644cbae79d104

  • SHA512

    e9cf4789960ab28b2d5a456bfc34ae22d6771f0257aea18725556b2e1a3e78d7489650b5eee98e7a38f449bcd901810ffa817d464d93559a80b75062510ce06a

  • SSDEEP

    6144:iAPTOCuq51JsmiQFF0kJNOlsh2IiobuUnGsf8AD:ioB7BsHQz8JmG0D

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      0f6816d7e70c38dc1ee2cd9efd7db462c2c3e09e805d32e9be8644cbae79d104

    • Size

      260KB

    • MD5

      a73c2a43a5dd9322188a8025c0303cbc

    • SHA1

      7a426b0c7d16fdb0634853ec4d02a9b93d19e240

    • SHA256

      0f6816d7e70c38dc1ee2cd9efd7db462c2c3e09e805d32e9be8644cbae79d104

    • SHA512

      e9cf4789960ab28b2d5a456bfc34ae22d6771f0257aea18725556b2e1a3e78d7489650b5eee98e7a38f449bcd901810ffa817d464d93559a80b75062510ce06a

    • SSDEEP

      6144:iAPTOCuq51JsmiQFF0kJNOlsh2IiobuUnGsf8AD:ioB7BsHQz8JmG0D

MITRE ATT&CK Enterprise v15

Tasks