General

  • Target

    edd638e1465aef30114eb920e232b77fcd9ba9db941f8f280f21f37487da3379.exe

  • Size

    257KB

  • Sample

    250216-x8b8vswrbw

  • MD5

    4eb61d0293bd4c96487cba1f519b7c6e

  • SHA1

    38ea82d4a0ba8677fca29d5f2c947059230733e6

  • SHA256

    edd638e1465aef30114eb920e232b77fcd9ba9db941f8f280f21f37487da3379

  • SHA512

    4b911f4e1f841e19f7e680af25c9711fe3da0e5c81b0b69e265f3d38efab6996d629a754ec259785e4408129c2be3e31a123ddca19a332822aa563b8a8f1c123

  • SSDEEP

    6144:CZTlnN3HxAhazaSK4QM5HTPmOFGOGt/HqixmyYVgGo5nK:AUM5LFfG5dflK

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      edd638e1465aef30114eb920e232b77fcd9ba9db941f8f280f21f37487da3379.exe

    • Size

      257KB

    • MD5

      4eb61d0293bd4c96487cba1f519b7c6e

    • SHA1

      38ea82d4a0ba8677fca29d5f2c947059230733e6

    • SHA256

      edd638e1465aef30114eb920e232b77fcd9ba9db941f8f280f21f37487da3379

    • SHA512

      4b911f4e1f841e19f7e680af25c9711fe3da0e5c81b0b69e265f3d38efab6996d629a754ec259785e4408129c2be3e31a123ddca19a332822aa563b8a8f1c123

    • SSDEEP

      6144:CZTlnN3HxAhazaSK4QM5HTPmOFGOGt/HqixmyYVgGo5nK:AUM5LFfG5dflK

MITRE ATT&CK Enterprise v15

Tasks