General

  • Target

    unaccidentally.db

  • Size

    376KB

  • Sample

    220921-rzqr1acbaj

  • MD5

    6677d166672f07995354673b7d1b4e41

  • SHA1

    7c9408952328ce971a20c118f17d361a5aa02b8f

  • SHA256

    e3b1c233d3648ffc7765cdef1b5e3b5e4a3ef83321b642e1367eddcb6aeb0bb5

  • SHA512

    062c1fbd390281dea3097b0e7b5845937cc6db8e91e0577dc5699f1784f4fc3b45ba9054d6fb12da612599642a463aae9cc2852757c89ccc43c6cce647437b49

  • SSDEEP

    6144:DT1WOGkH9+qJJHMl3yifLLi0epLihYRl/r82HV9kHpjFWBk3WScF2pQdfPnb4dRG:DsRw9DJpApXQRihGl/Zx8Qg1C

Malware Config

Extracted

Family

qakbot

Version

403.894

Botnet

obama206

Campaign

1663660089

C2

119.82.111.158:443

66.181.164.43:443

181.118.183.123:443

88.245.168.200:2222

70.49.33.200:2222

193.3.19.37:443

99.232.140.205:2222

110.4.255.247:443

134.35.9.144:443

89.211.217.38:995

64.207.215.69:443

83.110.219.59:993

197.94.84.128:443

177.255.14.99:995

41.103.226.172:443

109.155.5.164:993

190.44.40.48:995

187.205.222.100:443

41.107.78.223:995

191.97.234.238:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      unaccidentally.db

    • Size

      376KB

    • MD5

      6677d166672f07995354673b7d1b4e41

    • SHA1

      7c9408952328ce971a20c118f17d361a5aa02b8f

    • SHA256

      e3b1c233d3648ffc7765cdef1b5e3b5e4a3ef83321b642e1367eddcb6aeb0bb5

    • SHA512

      062c1fbd390281dea3097b0e7b5845937cc6db8e91e0577dc5699f1784f4fc3b45ba9054d6fb12da612599642a463aae9cc2852757c89ccc43c6cce647437b49

    • SSDEEP

      6144:DT1WOGkH9+qJJHMl3yifLLi0epLihYRl/r82HV9kHpjFWBk3WScF2pQdfPnb4dRG:DsRw9DJpApXQRihGl/Zx8Qg1C

MITRE ATT&CK Matrix

Tasks