General

  • Target

    850729319c047d894e79809ffef2272e25557b90960f7e61d889d1a6038808d4N.exe

  • Size

    319KB

  • Sample

    250215-xlcacayphn

  • MD5

    eae766de55736c8de51e7f072fa7b5f0

  • SHA1

    324061505bfbab18b27ed7a2b910eb09aedfb165

  • SHA256

    850729319c047d894e79809ffef2272e25557b90960f7e61d889d1a6038808d4

  • SHA512

    6bdeba5a24fb1ca8bd90897282375e109ce5df6dae51a57b05e18b06a560195d47539e118b990bf73ee980164c23b438f243b9ab370f8be364dd3488873bade4

  • SSDEEP

    6144:g10HUduhJclL9pWmIX0IKFNIbheln8DJ/YhKGdsZ6NPlf+BJeFllE7lpzkKrp:50d959pAXHKobwlQJ/e3d+cPlf+Bcll+

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      850729319c047d894e79809ffef2272e25557b90960f7e61d889d1a6038808d4N.exe

    • Size

      319KB

    • MD5

      eae766de55736c8de51e7f072fa7b5f0

    • SHA1

      324061505bfbab18b27ed7a2b910eb09aedfb165

    • SHA256

      850729319c047d894e79809ffef2272e25557b90960f7e61d889d1a6038808d4

    • SHA512

      6bdeba5a24fb1ca8bd90897282375e109ce5df6dae51a57b05e18b06a560195d47539e118b990bf73ee980164c23b438f243b9ab370f8be364dd3488873bade4

    • SSDEEP

      6144:g10HUduhJclL9pWmIX0IKFNIbheln8DJ/YhKGdsZ6NPlf+BJeFllE7lpzkKrp:50d959pAXHKobwlQJ/e3d+cPlf+Bcll+

MITRE ATT&CK Enterprise v15

Tasks