General

  • Target

    b1f79147c096d52fbc1c75428264d977fd42ad709b130a28ef07be11aba9b9e0.exe

  • Size

    257KB

  • Sample

    250208-rfmagazqgq

  • MD5

    c37feeabdf85804f5d1bbb6769fc80a0

  • SHA1

    5c5f289a43aece8cb3312eb54be9e4b57573b5d7

  • SHA256

    b1f79147c096d52fbc1c75428264d977fd42ad709b130a28ef07be11aba9b9e0

  • SHA512

    055e090a0f5291d54e7e30f72ee39fa2ae3f953e37150f4cda6112fa40d815679487993aabfd3699c17a0f5f9548675fe2ce4e6d136746dd569d53d95bc72877

  • SSDEEP

    3072:4icFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLG0:FXNNSo2EscAxmpDGIhtrTpUpH15WJSV

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      b1f79147c096d52fbc1c75428264d977fd42ad709b130a28ef07be11aba9b9e0.exe

    • Size

      257KB

    • MD5

      c37feeabdf85804f5d1bbb6769fc80a0

    • SHA1

      5c5f289a43aece8cb3312eb54be9e4b57573b5d7

    • SHA256

      b1f79147c096d52fbc1c75428264d977fd42ad709b130a28ef07be11aba9b9e0

    • SHA512

      055e090a0f5291d54e7e30f72ee39fa2ae3f953e37150f4cda6112fa40d815679487993aabfd3699c17a0f5f9548675fe2ce4e6d136746dd569d53d95bc72877

    • SSDEEP

      3072:4icFgFSqXNa0s3o2MV2SwcfjUGkmj1AWFhGIhtrJG+2ozcQU8gh1yhw7yds5VLG0:FXNNSo2EscAxmpDGIhtrTpUpH15WJSV

MITRE ATT&CK Enterprise v15

Tasks