General

  • Target

    77ee481a0fdaee040c2c106d4c5745b895ad869dedfcd3bca7edc0da8213b690

  • Size

    670KB

  • Sample

    220711-mrc4qaafg6

  • MD5

    9548df2103e636e6b3b258f7059140e7

  • SHA1

    daa5c789936d1d9ea390d0f0fc7738d76b9a46c9

  • SHA256

    77ee481a0fdaee040c2c106d4c5745b895ad869dedfcd3bca7edc0da8213b690

  • SHA512

    765b01041071e7799822e692c5402dbb4e5df10f27dcfc49c7c3b0149c0362107c761cf538b4112fb816c4035b7bb190482db711e0b88069471ea55e7fafa498

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

obama199

Campaign

1657265474

C2

121.7.223.45:2222

67.209.195.198:443

148.64.96.100:443

92.132.132.81:2222

217.128.122.65:2222

47.180.172.159:443

173.174.216.62:443

70.46.220.114:443

32.221.224.140:995

69.14.172.24:443

117.248.109.38:21

94.59.15.180:2222

38.70.253.226:2222

217.165.157.202:995

41.228.22.180:443

67.165.206.193:993

172.115.177.204:2222

186.90.153.162:2222

47.23.89.60:993

120.150.218.241:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      77ee481a0fdaee040c2c106d4c5745b895ad869dedfcd3bca7edc0da8213b690

    • Size

      670KB

    • MD5

      9548df2103e636e6b3b258f7059140e7

    • SHA1

      daa5c789936d1d9ea390d0f0fc7738d76b9a46c9

    • SHA256

      77ee481a0fdaee040c2c106d4c5745b895ad869dedfcd3bca7edc0da8213b690

    • SHA512

      765b01041071e7799822e692c5402dbb4e5df10f27dcfc49c7c3b0149c0362107c761cf538b4112fb816c4035b7bb190482db711e0b88069471ea55e7fafa498

MITRE ATT&CK Enterprise v6

Tasks