General

  • Target
    tapeworm.asc.dll
  • Size 584KB
  • Sample221019-l83v2afgeq
  • SHA256 82af67585343100b3f745739e09896f6b2068759ac2ce30a908d4b7bab7eb2aa
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • qakbot

Version
  • 403.973

Botnet
  • obama214

Campaign
  • 1666019778

C2
  • 105.96.221.136:443

  • 37.37.80.2:3389

  • 105.154.56.232:995

  • 41.107.116.19:443

  • 105.103.52.189:443

  • 159.192.204.135:443

  • 41.107.58.251:443

  • 177.152.65.142:443

  • 102.47.218.41:443

  • 176.45.35.243:443

  • 70.173.248.13:443

  • 102.159.77.134:995

  • 220.123.29.76:443

  • 82.12.196.197:443

  • 103.156.237.71:443

  • 149.126.159.254:443

  • 176.44.119.153:443

  • 181.56.171.3:995

  • 190.205.229.67:2222

  • 151.251.50.117:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target
      tapeworm.asc.dll
    • Size 584KB
    • SHA256 82af67585343100b3f745739e09896f6b2068759ac2ce30a908d4b7bab7eb2aa
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Matrix

Tasks