General

  • Target

    44361.60035625.dat =^_^=

  • Size

    1.0MB

  • Sample

    210614-dtzfx3ncwn

  • MD5

    002b86ca451654c07262deb4c058d9da

  • SHA1

    507530d20c69e9afa6630727a50d44961691afc3

  • SHA256

    acb3b60e870c425d0817ca36f4aba4ff1669c4c57285fda267664317edeb4b02

  • SHA512

    8878e6cb57bf637c459f37e4d8dbd88d5c77baef0ba5bd119fe8c0735f47fffedefddfcd635de844ce86b2574a473699c21067b0a23eb751ca5d637794cb2307

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama59

Campaign

1623398674

C2

105.198.236.101:443

136.232.34.70:443

45.32.211.207:995

45.32.211.207:2222

149.28.99.97:995

45.63.107.192:2222

207.246.77.75:995

149.28.99.97:443

149.28.99.97:2222

45.32.211.207:443

45.32.211.207:8443

45.63.107.192:995

45.63.107.192:443

149.28.98.196:2222

149.28.98.196:995

149.28.98.196:443

144.202.38.185:443

144.202.38.185:2222

144.202.38.185:995

149.28.101.90:443

Targets

    • Target

      44361.60035625.dat =^_^=

    • Size

      1.0MB

    • MD5

      002b86ca451654c07262deb4c058d9da

    • SHA1

      507530d20c69e9afa6630727a50d44961691afc3

    • SHA256

      acb3b60e870c425d0817ca36f4aba4ff1669c4c57285fda267664317edeb4b02

    • SHA512

      8878e6cb57bf637c459f37e4d8dbd88d5c77baef0ba5bd119fe8c0735f47fffedefddfcd635de844ce86b2574a473699c21067b0a23eb751ca5d637794cb2307

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks