General

  • Target

    72192be378969b2551f1275f43c5b360d95260914f85675009f96c116df9db6a

  • Size

    213KB

  • Sample

    250222-cvdjjsvrh1

  • MD5

    baf6248a4ef15f7d8f4cb9d203a2d0c5

  • SHA1

    ab232d55fa2f38cc6f70145c5b4f114870673f2b

  • SHA256

    72192be378969b2551f1275f43c5b360d95260914f85675009f96c116df9db6a

  • SHA512

    ac7b02f21a8f047a754bf5112b3e5023d775e06d4577f4db9fbcc4ab832012b7d1c619e205cc5dfbab6d8ed820f2d1f6bf610dc1c6c66534557844925b3eadf0

  • SSDEEP

    6144:yQfbXnEreyARNf+fIfvEEDi3EJ3FzbPotDy:hXkej+f4VDOEVdbgt

Malware Config

Extracted

Family

simda

Attributes
  • dga

    gatyfus.com

    lyvyxor.com

    vojyqem.com

    qetyfuv.com

    puvyxil.com

    gahyqah.com

    lyryfyd.com

    vocyzit.com

    qegyqaq.com

    purydyv.com

    gacyzuz.com

    lygymoj.com

    vowydef.com

    qexylup.com

    pufymoq.com

    gaqydeb.com

    lyxylux.com

    vofymik.com

    qeqysag.com

    puzylyp.com

    gadyniw.com

    lymysan.com

    volykyc.com

    qedynul.com

    pumypog.com

    galykes.com

    lysynur.com

    vonypom.com

    qekykev.com

    pupybul.com

Targets

    • Target

      72192be378969b2551f1275f43c5b360d95260914f85675009f96c116df9db6a

    • Size

      213KB

    • MD5

      baf6248a4ef15f7d8f4cb9d203a2d0c5

    • SHA1

      ab232d55fa2f38cc6f70145c5b4f114870673f2b

    • SHA256

      72192be378969b2551f1275f43c5b360d95260914f85675009f96c116df9db6a

    • SHA512

      ac7b02f21a8f047a754bf5112b3e5023d775e06d4577f4db9fbcc4ab832012b7d1c619e205cc5dfbab6d8ed820f2d1f6bf610dc1c6c66534557844925b3eadf0

    • SSDEEP

      6144:yQfbXnEreyARNf+fIfvEEDi3EJ3FzbPotDy:hXkej+f4VDOEVdbgt

MITRE ATT&CK Enterprise v15

Tasks