General

  • Target

    3ecd80855ef2ec7f4d9f9838f559b313288b4e6d383db36376e6b511d5c32b02

  • Size

    313KB

  • Sample

    250221-2r1bksspfn

  • MD5

    071ecd80e4b4a3cb17ffbe0f49c36c40

  • SHA1

    4a48e8d46444b7ee0f8821ab810c62af69f243f1

  • SHA256

    3ecd80855ef2ec7f4d9f9838f559b313288b4e6d383db36376e6b511d5c32b02

  • SHA512

    142e20fe7b78713580660f090ed5fd39121e702b2891fc40e5e540bf3b4e72ef9ac4e2c3bec8a3d3c21aefb4de4e43be79a7580452351fb788d676f403a4cd5a

  • SSDEEP

    6144:pCUYVZ1ktxr13KG8uyfHej7pbWcqkEfsgRsRXmYHjQd+MJkBDUHYDMb:IzepUfHej7FW9xs7jQ7mY4U

Malware Config

Extracted

Family

simda

Attributes
  • dga

    cihunemyror.eu

    digivehusyd.eu

    vofozymufok.eu

    fodakyhijyv.eu

    nopegymozow.eu

    gatedyhavyd.eu

    marytymenok.eu

    jewuqyjywyv.eu

    qeqinuqypoq.eu

    kemocujufys.eu

    rynazuqihoj.eu

    lyvejujolec.eu

    tucyguqaciq.eu

    xuxusujenes.eu

    puzutuqeqij.eu

    ciliqikytec.eu

    dikoniwudim.eu

    vojacikigep.eu

    fogeliwokih.eu

    nofyjikoxex.eu

    gadufiwabim.eu

    masisokemep.eu

    jepororyrih.eu

    qetoqolusex.eu

    keraborigin.eu

    ryqecolijet.eu

    lymylorozig.eu

    tunujolavez.eu

    xubifaremin.eu

    puvopalywet.eu

Targets

    • Target

      3ecd80855ef2ec7f4d9f9838f559b313288b4e6d383db36376e6b511d5c32b02

    • Size

      313KB

    • MD5

      071ecd80e4b4a3cb17ffbe0f49c36c40

    • SHA1

      4a48e8d46444b7ee0f8821ab810c62af69f243f1

    • SHA256

      3ecd80855ef2ec7f4d9f9838f559b313288b4e6d383db36376e6b511d5c32b02

    • SHA512

      142e20fe7b78713580660f090ed5fd39121e702b2891fc40e5e540bf3b4e72ef9ac4e2c3bec8a3d3c21aefb4de4e43be79a7580452351fb788d676f403a4cd5a

    • SSDEEP

      6144:pCUYVZ1ktxr13KG8uyfHej7pbWcqkEfsgRsRXmYHjQd+MJkBDUHYDMb:IzepUfHej7FW9xs7jQ7mY4U

MITRE ATT&CK Enterprise v15

Tasks