General

  • Target
    4444444.dat
  • Size 693KB
  • Sample211116-r5vyxaecd2
  • SHA256 898fa15b790b45f2806672ef27c1803407ca2c66b347013b0955d9fd7ea4cd78
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Version
  • 403.2

Botnet
  • obama129

Campaign
  • 1637062221

C2
  • 117.248.109.38:21

  • 117.203.51.17:443

  • 103.142.10.177:443

  • 109.177.77.68:995

  • 45.9.20.200:2211

  • 78.191.45.163:995

  • 102.65.38.57:443

  • 136.143.11.232:443

  • 91.178.126.51:995

  • 187.121.88.3:995

  • 181.118.183.60:443

  • 72.252.201.34:465

  • 111.250.51.232:443

  • 220.255.25.187:2222

  • 39.49.23.166:995

  • 188.27.119.243:443

  • 209.210.95.228:443

  • 190.73.3.148:2222

  • 86.8.177.143:443

  • 136.232.34.70:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target
      4444444.dat
    • Size 693KB
    • SHA256 898fa15b790b45f2806672ef27c1803407ca2c66b347013b0955d9fd7ea4cd78
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks