General

  • Target

    1948-57-0x0000000000260000-0x0000000000282000-memory.dmp

  • Size

    136KB

  • Sample

    220914-re517aecbk

  • MD5

    3dd467b9cde593b2e55fd5954342f743

  • SHA1

    5539bc0f113eaa3f2c383d6d41b5652e1a186189

  • SHA256

    2b06bad0d1b52df01d930cf8b39f50aeaa3e360be09e46d86e747b81ab3c2a86

  • SHA512

    94b3baf79f9dd90f55b318141c297269b15ad65c89eb57f895ddc9dd4b05ff5ca2c9d02548995023457a287da9404df1b14f4024b8cb89573888446064866248

  • SSDEEP

    3072:qhw4nPjx3ECKnkpXPPpq1yAXJQ1EHs4TBf9iIaFA6:aPjVEdnkpXPPAXXJ0EHs4TBVtIl

Malware Config

Extracted

Family

qakbot

Version

403.858

Botnet

obama202

Campaign

1663062752

C2

99.232.140.205:2222

41.69.118.117:995

179.111.111.88:32101

37.210.148.30:995

47.146.182.110:443

191.97.234.238:995

64.207.215.69:443

88.233.194.154:2222

81.131.161.131:2078

86.98.156.176:993

200.161.62.126:32101

88.244.84.195:443

78.100.254.17:2222

85.114.99.34:443

113.170.216.154:443

194.49.79.231:443

193.3.19.37:443

84.38.133.191:443

175.110.231.67:443

191.84.204.214:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1948-57-0x0000000000260000-0x0000000000282000-memory.dmp

    • Size

      136KB

    • MD5

      3dd467b9cde593b2e55fd5954342f743

    • SHA1

      5539bc0f113eaa3f2c383d6d41b5652e1a186189

    • SHA256

      2b06bad0d1b52df01d930cf8b39f50aeaa3e360be09e46d86e747b81ab3c2a86

    • SHA512

      94b3baf79f9dd90f55b318141c297269b15ad65c89eb57f895ddc9dd4b05ff5ca2c9d02548995023457a287da9404df1b14f4024b8cb89573888446064866248

    • SSDEEP

      3072:qhw4nPjx3ECKnkpXPPpq1yAXJQ1EHs4TBf9iIaFA6:aPjVEdnkpXPPAXXJ0EHs4TBVtIl

    Score
    1/10

MITRE ATT&CK Matrix

Tasks