General

  • Target

    ec92d32c34b664d0a7f7e19fa92c917764bc467cc19e6ce929902fef7aee2520.exe

  • Size

    319KB

  • Sample

    250217-hagclatmfs

  • MD5

    bf757ad86388f95d736ed6a977dd26ed

  • SHA1

    a4c99b4b0fb8c98259b58dfe20ccdd46c41aa51e

  • SHA256

    ec92d32c34b664d0a7f7e19fa92c917764bc467cc19e6ce929902fef7aee2520

  • SHA512

    3cd30b9c63cb028749357bacc6c193abc0c843c46f6877b79d3ef2929074f506520decce4aa6af7dab725176522b32030469e269c5fff2cfd4210298b14fa320

  • SSDEEP

    6144:g10HUduhJclL9pWmIX0IKFNIbheln8DJ/YhKGdsZ6NPlf+BJeFllE7lpzkKrpz:50d959pAXHKobwlQJ/e3d+cPlf+BcllK

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      ec92d32c34b664d0a7f7e19fa92c917764bc467cc19e6ce929902fef7aee2520.exe

    • Size

      319KB

    • MD5

      bf757ad86388f95d736ed6a977dd26ed

    • SHA1

      a4c99b4b0fb8c98259b58dfe20ccdd46c41aa51e

    • SHA256

      ec92d32c34b664d0a7f7e19fa92c917764bc467cc19e6ce929902fef7aee2520

    • SHA512

      3cd30b9c63cb028749357bacc6c193abc0c843c46f6877b79d3ef2929074f506520decce4aa6af7dab725176522b32030469e269c5fff2cfd4210298b14fa320

    • SSDEEP

      6144:g10HUduhJclL9pWmIX0IKFNIbheln8DJ/YhKGdsZ6NPlf+BJeFllE7lpzkKrpz:50d959pAXHKobwlQJ/e3d+cPlf+BcllK

MITRE ATT&CK Enterprise v15

Tasks