General

  • Target

    3fe99228ddf2473ae182ed3e1c34752229bd767f70e00fe675019f1a091b8344

  • Size

    218KB

  • Sample

    250212-17ngaayqbn

  • MD5

    695e4c3882b5b50b6aa93076b0683d1c

  • SHA1

    bd5184d8ade4a5dfe499b1889ef514d157b1ebdb

  • SHA256

    3fe99228ddf2473ae182ed3e1c34752229bd767f70e00fe675019f1a091b8344

  • SHA512

    0a859ce9ce573cb13a5bd55a25b5837e264b423dd8a3ee0a50773fc72271330bbb966fea95cd9a7fec7600bae7d8f37e7778f76c6de57335ee8239b11cadb4d1

  • SSDEEP

    3072:wvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:e1SyAJp6rjn1gOObn4b6h9h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      3fe99228ddf2473ae182ed3e1c34752229bd767f70e00fe675019f1a091b8344

    • Size

      218KB

    • MD5

      695e4c3882b5b50b6aa93076b0683d1c

    • SHA1

      bd5184d8ade4a5dfe499b1889ef514d157b1ebdb

    • SHA256

      3fe99228ddf2473ae182ed3e1c34752229bd767f70e00fe675019f1a091b8344

    • SHA512

      0a859ce9ce573cb13a5bd55a25b5837e264b423dd8a3ee0a50773fc72271330bbb966fea95cd9a7fec7600bae7d8f37e7778f76c6de57335ee8239b11cadb4d1

    • SSDEEP

      3072:wvm4SZsQrNzPrl6rjGMjp39d4u8iqddCxMIJOb2o5DsBPjim6hwM2H6:e1SyAJp6rjn1gOObn4b6h9h

MITRE ATT&CK Enterprise v15

Tasks