General

  • Target

    1748-58-0x0000000075210000-0x0000000075303000-memory.dmp

  • Size

    972KB

  • Sample

    221002-1be52abda7

  • MD5

    c70800a83b069ea5444593148667c061

  • SHA1

    5c522f78466b2b36380333df9a4305eb7bd2c19c

  • SHA256

    ff084a610d5595988a38e6ae26a28a977396ac8ce9d528195311db6861fa0f74

  • SHA512

    d19d37efa7a89bcb5a7b447d968beadaf704bbee1f92377399f63eb780ce56e22a66fa767b4d2cbd00aa02af4f870edc9df21bd64643afb5424f3b0748cb2916

  • SSDEEP

    24576:4dabTOPeogLtdk25qMKvb/o2ggJcW2QRqV:MKToeLDk251KvjjXJciqV

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

biden54

Campaign

1634810637

C2

136.143.11.232:443

63.143.92.99:995

182.176.180.73:443

136.232.34.70:443

123.252.190.14:443

216.201.162.158:443

37.208.181.198:61200

140.82.49.12:443

197.89.144.102:443

89.137.52.44:443

109.12.111.14:443

78.191.24.189:995

105.198.236.99:995

196.207.140.40:995

41.235.69.115:443

2.222.167.138:443

117.198.156.56:443

24.231.209.2:6881

27.223.92.142:995

96.246.158.154:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      1748-58-0x0000000075210000-0x0000000075303000-memory.dmp

    • Size

      972KB

    • MD5

      c70800a83b069ea5444593148667c061

    • SHA1

      5c522f78466b2b36380333df9a4305eb7bd2c19c

    • SHA256

      ff084a610d5595988a38e6ae26a28a977396ac8ce9d528195311db6861fa0f74

    • SHA512

      d19d37efa7a89bcb5a7b447d968beadaf704bbee1f92377399f63eb780ce56e22a66fa767b4d2cbd00aa02af4f870edc9df21bd64643afb5424f3b0748cb2916

    • SSDEEP

      24576:4dabTOPeogLtdk25qMKvb/o2ggJcW2QRqV:MKToeLDk251KvjjXJciqV

    Score
    3/10

MITRE ATT&CK Matrix

Tasks