General

  • Target

    b4b1a09c9cc23584f3795b3405d3dc368acae0939ce3e7d5cf6296abe9389d60N.exe

  • Size

    258KB

  • Sample

    250208-femn3awlgs

  • MD5

    9122ab0c9ab2c34b32c1bdf4e10fc1f0

  • SHA1

    0bda5614b26af11915b3648b4c3c0ed16ee529a3

  • SHA256

    b4b1a09c9cc23584f3795b3405d3dc368acae0939ce3e7d5cf6296abe9389d60

  • SHA512

    26f4e5c163b43435055f87c97ecda55c6c2e6f847d8a173d8fcc1d5a84d6484715313131fbfcea576a06b368859b61e7c988139b1af42371411988efb4a18c7b

  • SSDEEP

    3072:3FgNx7UOOrEHuOMwhvLqJhacw8kgrY1ymk2+oRVDqc9ZZIap1ak4yfeVMB0anXBQ:36TOrEHJNUkgU5m0ZOMcCWw+PGlW

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      b4b1a09c9cc23584f3795b3405d3dc368acae0939ce3e7d5cf6296abe9389d60N.exe

    • Size

      258KB

    • MD5

      9122ab0c9ab2c34b32c1bdf4e10fc1f0

    • SHA1

      0bda5614b26af11915b3648b4c3c0ed16ee529a3

    • SHA256

      b4b1a09c9cc23584f3795b3405d3dc368acae0939ce3e7d5cf6296abe9389d60

    • SHA512

      26f4e5c163b43435055f87c97ecda55c6c2e6f847d8a173d8fcc1d5a84d6484715313131fbfcea576a06b368859b61e7c988139b1af42371411988efb4a18c7b

    • SSDEEP

      3072:3FgNx7UOOrEHuOMwhvLqJhacw8kgrY1ymk2+oRVDqc9ZZIap1ak4yfeVMB0anXBQ:36TOrEHJNUkgU5m0ZOMcCWw+PGlW

MITRE ATT&CK Enterprise v15

Tasks