General

  • Target

    d784c014d4d9f01be90e99961485af8829b5b5a31447b9858089405e213eac45

  • Size

    255KB

  • Sample

    250215-hnfm8awras

  • MD5

    ee3e2c6eeac6fabb7b9affd42419e65a

  • SHA1

    0c2931064def8773b46f5e043a3e01ef38fa204f

  • SHA256

    d784c014d4d9f01be90e99961485af8829b5b5a31447b9858089405e213eac45

  • SHA512

    4e3094d0bb2b34dc4fdb74f4ee688f4756d9f21f37092dbfb8c00f81df6e72ed021db1c16edb56e0675c5a40930414df01b729bc52f3ce022ffbd26f6b2f8026

  • SSDEEP

    6144:V+JhAlQFFiZ2q4TLTOZGEFTJjWdftk+R:V+JhZc2R/TcbjW7h

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      d784c014d4d9f01be90e99961485af8829b5b5a31447b9858089405e213eac45

    • Size

      255KB

    • MD5

      ee3e2c6eeac6fabb7b9affd42419e65a

    • SHA1

      0c2931064def8773b46f5e043a3e01ef38fa204f

    • SHA256

      d784c014d4d9f01be90e99961485af8829b5b5a31447b9858089405e213eac45

    • SHA512

      4e3094d0bb2b34dc4fdb74f4ee688f4756d9f21f37092dbfb8c00f81df6e72ed021db1c16edb56e0675c5a40930414df01b729bc52f3ce022ffbd26f6b2f8026

    • SSDEEP

      6144:V+JhAlQFFiZ2q4TLTOZGEFTJjWdftk+R:V+JhZc2R/TcbjW7h

MITRE ATT&CK Enterprise v15

Tasks