General

  • Target
    644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e
  • Size 511KB
  • Sample220322-p2x8rafba7
  • SHA256 644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Version
  • 403.549

Botnet
  • obama168

Campaign
  • 1647853291

C2
  • 103.87.95.131:2222

  • 195.32.57.18:80

  • 92.99.229.158:2222

  • 40.134.246.185:995

  • 31.215.118.154:1194

  • 41.228.22.180:443

  • 39.49.39.239:995

  • 217.128.122.65:2222

  • 86.98.27.253:443

  • 82.152.39.39:443

  • 197.0.103.214:443

  • 76.169.147.192:32103

  • 24.152.219.253:995

  • 37.186.54.166:995

  • 202.134.152.2:2222

  • 177.134.208.155:993

  • 45.239.129.13:443

  • 1.161.76.70:995

  • 120.150.218.241:995

  • 79.52.204.9:50001

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target
      644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e
    • Size 511KB
    • SHA256 644f00812319bdb00411294b2ddb4e9f86bf0797f825543ea0fe16db1e1aea4e
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks