General

  • Target

    58f1cbdf1d27fa57d9f091196e670dc816fbd7d2db7432c105fdacf6dfc76843N.exe

  • Size

    257KB

  • Sample

    250208-k33gmswlgy

  • MD5

    9ac880fae702a1b569940ca59b8de6c0

  • SHA1

    737f7cc3d4de37a625a2f139fbff4c4061cc4caa

  • SHA256

    58f1cbdf1d27fa57d9f091196e670dc816fbd7d2db7432c105fdacf6dfc76843

  • SHA512

    32e1cdc2220ae658576062cb514072d96f380212d67d4acc47c8db8d3eede22eb6e8b37be2ab317b832fd9efa08f47206515d960aa0d67aaab283dd1702e2d45

  • SSDEEP

    3072:4icFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:FXNNSo2EscAxmpDGIhtrTpUpH15WJS3

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      58f1cbdf1d27fa57d9f091196e670dc816fbd7d2db7432c105fdacf6dfc76843N.exe

    • Size

      257KB

    • MD5

      9ac880fae702a1b569940ca59b8de6c0

    • SHA1

      737f7cc3d4de37a625a2f139fbff4c4061cc4caa

    • SHA256

      58f1cbdf1d27fa57d9f091196e670dc816fbd7d2db7432c105fdacf6dfc76843

    • SHA512

      32e1cdc2220ae658576062cb514072d96f380212d67d4acc47c8db8d3eede22eb6e8b37be2ab317b832fd9efa08f47206515d960aa0d67aaab283dd1702e2d45

    • SSDEEP

      3072:4icFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLGM:FXNNSo2EscAxmpDGIhtrTpUpH15WJS3

MITRE ATT&CK Enterprise v15

Tasks