General

  • Target
    file.dat
  • Size 539KB
  • Sample210922-vvarrsdce4
  • SHA256 5b0bf4defd88befa231c4ebe655ae860b180baa8e0331cd6c570d31f6751b9bd
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Version
  • 402.318

Botnet
  • obama102

Campaign
  • 1632302707

C2
  • 120.150.218.241:995

  • 47.22.148.6:443

  • 105.198.236.99:443

  • 95.77.223.148:443

  • 140.82.49.12:443

  • 27.223.92.142:995

  • 73.151.236.31:443

  • 136.232.34.70:443

  • 144.139.47.206:443

  • 45.46.53.140:2222

  • 76.25.142.196:443

  • 173.21.10.71:2222

  • 75.188.35.168:443

  • 71.74.12.34:443

  • 96.37.113.36:993

  • 67.165.206.193:993

  • 189.210.115.207:443

  • 72.252.201.69:443

  • 24.139.72.117:443

  • 24.229.150.54:995

Targets

    • Target
      file.dat
    • Size 539KB
    • SHA256 5b0bf4defd88befa231c4ebe655ae860b180baa8e0331cd6c570d31f6751b9bd
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks