General

  • Target
    473f4322945d1142612e6059cf7f0cc5
  • Size 484KB
  • Sample210925-qhtlwsdbaj
  • SHA256 45e5bddd31db89802853edbb213d2b1bbd9837fc0a2c2fafc44293633726566b
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Version
  • 402.343

Botnet
  • obama103

Campaign
  • 1632477754

C2
  • 136.232.34.70:443

  • 216.201.162.158:443

  • 92.59.35.196:2222

  • 105.198.236.99:443

  • 185.250.148.74:443

  • 73.77.87.137:443

  • 196.218.227.241:995

  • 103.148.120.144:443

  • 120.150.218.241:995

  • 47.22.148.6:443

  • 140.82.49.12:443

  • 71.74.12.34:443

  • 27.223.92.142:995

  • 76.25.142.196:443

  • 95.77.223.148:443

  • 75.188.35.168:443

  • 96.37.113.36:993

  • 173.21.10.71:2222

  • 45.46.53.140:2222

  • 73.151.236.31:443

Targets

    • Target
      473f4322945d1142612e6059cf7f0cc5
    • Size 484KB
    • SHA256 45e5bddd31db89802853edbb213d2b1bbd9837fc0a2c2fafc44293633726566b
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks