General

  • Target

    44378b1b0ee76b3d9cebf90f22e2f1c2f96731a01ce63f7bef365ff7429223ba

  • Size

    217KB

  • Sample

    210428-p67bk5x7gn

  • MD5

    1233a0fb2d8fc8fa24bbc9fd34b94965

  • SHA1

    42974b69d5bc7a986f46fc8af1ab5d6c70e18351

  • SHA256

    44378b1b0ee76b3d9cebf90f22e2f1c2f96731a01ce63f7bef365ff7429223ba

  • SHA512

    3d5bb840059a66f484c126814be349b9d5b3d7c2560d8af1db7aaf3da26c922fedbc361e08792a63b5f9b034fd6c831856a30734847704f22cfbaed529663ba5

Malware Config

Extracted

Family

qakbot

Version

402.12

Botnet

obama30

Campaign

1618843418

C2

83.110.109.164:2222

75.67.192.125:443

189.210.115.207:443

47.196.192.184:443

72.252.201.69:443

151.205.102.42:443

81.97.154.100:443

24.117.107.120:443

140.82.49.12:443

78.63.226.32:443

72.240.200.181:2222

75.137.47.174:443

71.41.184.10:3389

73.25.124.140:2222

149.28.101.90:8443

149.28.101.90:2222

45.77.115.208:995

45.77.115.208:8443

207.246.77.75:8443

207.246.77.75:2222

Targets

    • Target

      44378b1b0ee76b3d9cebf90f22e2f1c2f96731a01ce63f7bef365ff7429223ba

    • Size

      217KB

    • MD5

      1233a0fb2d8fc8fa24bbc9fd34b94965

    • SHA1

      42974b69d5bc7a986f46fc8af1ab5d6c70e18351

    • SHA256

      44378b1b0ee76b3d9cebf90f22e2f1c2f96731a01ce63f7bef365ff7429223ba

    • SHA512

      3d5bb840059a66f484c126814be349b9d5b3d7c2560d8af1db7aaf3da26c922fedbc361e08792a63b5f9b034fd6c831856a30734847704f22cfbaed529663ba5

MITRE ATT&CK Matrix

Tasks