General

  • Target

    b4a11ee3afd58d8f760f82c7511fbbcdd62d8070807d05349ecfca3d9bf2b6ce.bin

  • Size

    126KB

  • Sample

    220915-r47ajsddb3

  • MD5

    cf90bcc49d5d16150792bdff924d5407

  • SHA1

    7b2e55a0df73faff71c29b77b9f4b34dca17c384

  • SHA256

    b4a11ee3afd58d8f760f82c7511fbbcdd62d8070807d05349ecfca3d9bf2b6ce

  • SHA512

    30866bb61525496989de28c994f85ff3871f9b55d950dc081e53507b4149e71ac1d791e1e6827bf7532a9a4de42bc76b599a2d7fa3341e248ca1d459593a04d9

  • SSDEEP

    3072:kbz5PFDCwaGNRFrgLEArJOEzMIQTBfpYAaFAq:MpFDCfGNRF8LRrJ1zxQTBhnIV

Malware Config

Extracted

Family

qakbot

Version

403.858

Botnet

obama202

Campaign

1663062752

C2

99.232.140.205:2222

41.69.118.117:995

179.111.111.88:32101

37.210.148.30:995

47.146.182.110:443

191.97.234.238:995

64.207.215.69:443

88.233.194.154:2222

81.131.161.131:2078

86.98.156.176:993

200.161.62.126:32101

88.244.84.195:443

78.100.254.17:2222

85.114.99.34:443

113.170.216.154:443

194.49.79.231:443

193.3.19.37:443

84.38.133.191:443

175.110.231.67:443

191.84.204.214:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      b4a11ee3afd58d8f760f82c7511fbbcdd62d8070807d05349ecfca3d9bf2b6ce.bin

    • Size

      126KB

    • MD5

      cf90bcc49d5d16150792bdff924d5407

    • SHA1

      7b2e55a0df73faff71c29b77b9f4b34dca17c384

    • SHA256

      b4a11ee3afd58d8f760f82c7511fbbcdd62d8070807d05349ecfca3d9bf2b6ce

    • SHA512

      30866bb61525496989de28c994f85ff3871f9b55d950dc081e53507b4149e71ac1d791e1e6827bf7532a9a4de42bc76b599a2d7fa3341e248ca1d459593a04d9

    • SSDEEP

      3072:kbz5PFDCwaGNRFrgLEArJOEzMIQTBfpYAaFAq:MpFDCfGNRF8LRrJ1zxQTBhnIV

MITRE ATT&CK Enterprise v6

Tasks