General

  • Target

    salute.db

  • Size

    376KB

  • Sample

    220921-rvpzxageb5

  • MD5

    26b404b3629f5ffe7055933a5ccf5dfd

  • SHA1

    b19da867c2f55b01814e698edae016d6beb6ef7d

  • SHA256

    5ceb3a49f47427cbbfaa09100fe1a8b7176c40c8cee24d1d42d636109276954b

  • SHA512

    f0915ba5e5bb69356ca8791b8aeea9d2ca86f64fda598963c861f23e8b40d46a87a5d7caedcd8041b5fe4af10fbd2bb80335fa211e52253d0a17008ee8a269f8

  • SSDEEP

    6144:DT1WOGkH9+qJJHMl3yifLLi0epLihYRl/r82HV9kHpjFWBk3WScv2pQdfPnb4dRG:DsRw9DJpApXQRihGl/ZL8Qg1C

Malware Config

Extracted

Family

qakbot

Version

403.894

Botnet

obama206

Campaign

1663660089

C2

119.82.111.158:443

66.181.164.43:443

181.118.183.123:443

88.245.168.200:2222

70.49.33.200:2222

193.3.19.37:443

99.232.140.205:2222

110.4.255.247:443

134.35.9.144:443

89.211.217.38:995

64.207.215.69:443

83.110.219.59:993

197.94.84.128:443

177.255.14.99:995

41.103.226.172:443

109.155.5.164:993

190.44.40.48:995

187.205.222.100:443

41.107.78.223:995

191.97.234.238:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      salute.db

    • Size

      376KB

    • MD5

      26b404b3629f5ffe7055933a5ccf5dfd

    • SHA1

      b19da867c2f55b01814e698edae016d6beb6ef7d

    • SHA256

      5ceb3a49f47427cbbfaa09100fe1a8b7176c40c8cee24d1d42d636109276954b

    • SHA512

      f0915ba5e5bb69356ca8791b8aeea9d2ca86f64fda598963c861f23e8b40d46a87a5d7caedcd8041b5fe4af10fbd2bb80335fa211e52253d0a17008ee8a269f8

    • SSDEEP

      6144:DT1WOGkH9+qJJHMl3yifLLi0epLihYRl/r82HV9kHpjFWBk3WScv2pQdfPnb4dRG:DsRw9DJpApXQRihGl/ZL8Qg1C

MITRE ATT&CK Matrix

Tasks