General

  • Target
    288d263dc2e6640869ad85b17c797919
  • Size 717KB
  • Sample220412-sa124scgbm
  • SHA256 f6e7187a8e0aa202fe89008b5a5cc5e99dc5c3aaede7213283cae41dc7cb3ebc
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Version
  • 403.573

Botnet
  • obama175

Campaign
  • 1649748306

C2
  • 76.69.155.202:2222

  • 72.66.116.235:995

  • 103.107.113.120:443

  • 113.11.89.165:995

  • 208.107.221.224:443

  • 103.88.226.30:443

  • 75.99.168.194:443

  • 75.113.214.234:2222

  • 76.169.147.192:32103

  • 190.73.3.148:2222

  • 39.52.2.90:995

  • 38.70.253.226:2222

  • 5.95.58.211:2087

  • 74.15.2.252:2222

  • 76.70.9.169:2222

  • 121.74.167.191:995

  • 197.167.62.14:993

  • 108.60.213.141:443

  • 47.23.89.62:993

  • 86.97.247.20:2222

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target
      288d263dc2e6640869ad85b17c797919
    • Size 717KB
    • SHA256 f6e7187a8e0aa202fe89008b5a5cc5e99dc5c3aaede7213283cae41dc7cb3ebc
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks