General

  • Target
    89d3554f5ff07d72e5bd4d1b8de3934b
  • Size 484KB
  • Sample210924-q6e4eahbf7
  • SHA256 8d55a54993c00a00daccdf2c7bf69978dbc0222af5b2d024e4e2043695401040
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Version
  • 402.343

Botnet
  • obama103

Campaign
  • 1632477754

C2
  • 136.232.34.70:443

  • 216.201.162.158:443

  • 92.59.35.196:2222

  • 105.198.236.99:443

  • 185.250.148.74:443

  • 73.77.87.137:443

  • 196.218.227.241:995

  • 103.148.120.144:443

  • 120.150.218.241:995

  • 47.22.148.6:443

  • 140.82.49.12:443

  • 71.74.12.34:443

  • 27.223.92.142:995

  • 76.25.142.196:443

  • 95.77.223.148:443

  • 75.188.35.168:443

  • 96.37.113.36:993

  • 173.21.10.71:2222

  • 45.46.53.140:2222

  • 73.151.236.31:443

Targets

    • Target
      89d3554f5ff07d72e5bd4d1b8de3934b
    • Size 484KB
    • SHA256 8d55a54993c00a00daccdf2c7bf69978dbc0222af5b2d024e4e2043695401040
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks