General

  • Target
    44267.7472592593.dat
  • Size 720KB
  • Sample210312-7acnf1g2s2
  • SHA256 ff55279d5ef18ff4efb6cd662a7f94f4a5498ccaa2db27df946b6118a32a7c84
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Botnet
  • obama12

Campaign
  • 1615566531

C2
  • 81.214.126.173:2222

  • 75.118.1.141:443

  • 98.252.118.134:443

  • 81.97.154.100:443

  • 186.31.77.42:443

  • 71.117.132.169:443

  • 24.139.72.117:443

  • 106.51.52.111:443

  • 47.196.192.184:443

  • 24.95.61.62:443

  • 47.22.148.6:443

  • 195.12.154.8:443

  • 71.163.223.159:443

  • 71.41.184.10:3389

  • 193.248.221.184:2222

  • 83.110.108.38:2222

  • 92.59.35.196:2222

  • 73.25.124.140:2222

  • 75.67.192.125:443

  • 83.196.56.65:2222

Targets

    • Target
      44267.7472592593.dat
    • Size 720KB
    • SHA256 ff55279d5ef18ff4efb6cd662a7f94f4a5498ccaa2db27df946b6118a32a7c84
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks