General

  • Target

    times.db

  • Size

    376KB

  • Sample

    220923-vpd71aahgm

  • MD5

    f71e523c04d8a084669e8519edbb1035

  • SHA1

    c72fe45fbcf9d23365d8d48b8f78a2d99426cb00

  • SHA256

    29ac39065f707311a3281268b643a66fdbd2d08c01eaea8bf6229364c69201a6

  • SHA512

    9a8add5616abf7693b29c4ea09bebdc5c65194b6cae6886f592d3dc8aec4cd271a21049e3a3308382c479058389365af1eec25e808c57583c64f20587ffdc78d

  • SSDEEP

    6144:DT1WOGkH9+qJJHMl3yifLLi0epLihYRl/r82HV9kHpjFWBk3WScm2pQdfPnb4dRG:DsRw9DJpApXQRihGl/Zq8Qg1C

Malware Config

Extracted

Family

qakbot

Version

403.894

Botnet

obama206

Campaign

1663660089

C2

119.82.111.158:443

66.181.164.43:443

181.118.183.123:443

88.245.168.200:2222

70.49.33.200:2222

193.3.19.37:443

99.232.140.205:2222

110.4.255.247:443

134.35.9.144:443

89.211.217.38:995

64.207.215.69:443

83.110.219.59:993

197.94.84.128:443

177.255.14.99:995

41.103.226.172:443

109.155.5.164:993

190.44.40.48:995

187.205.222.100:443

41.107.78.223:995

191.97.234.238:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      times.db

    • Size

      376KB

    • MD5

      f71e523c04d8a084669e8519edbb1035

    • SHA1

      c72fe45fbcf9d23365d8d48b8f78a2d99426cb00

    • SHA256

      29ac39065f707311a3281268b643a66fdbd2d08c01eaea8bf6229364c69201a6

    • SHA512

      9a8add5616abf7693b29c4ea09bebdc5c65194b6cae6886f592d3dc8aec4cd271a21049e3a3308382c479058389365af1eec25e808c57583c64f20587ffdc78d

    • SSDEEP

      6144:DT1WOGkH9+qJJHMl3yifLLi0epLihYRl/r82HV9kHpjFWBk3WScm2pQdfPnb4dRG:DsRw9DJpApXQRihGl/Zq8Qg1C

MITRE ATT&CK Matrix

Tasks