General

  • Target

    50e597f53ce7c3a990da834784c20937c40cc8b468796772e4ebc4b31d474928.dll

  • Size

    157KB

  • Sample

    221027-blbg6aaccm

  • MD5

    ad8ba54bcf8815dafcd911dce4b501df

  • SHA1

    2011ef829f0ec8227c64802f8467e6bbade7b8e6

  • SHA256

    50e597f53ce7c3a990da834784c20937c40cc8b468796772e4ebc4b31d474928

  • SHA512

    3da267acbeaaf94bcc90f2833d2742902984b96dbfa1b8ab2f68b11d7570e494965624abeb3327da74be5be70b081f8dd57e7f2159f2abb16094eb52efdf0112

  • SSDEEP

    3072:GbLJEsAXBFa2MAnJuXTb/TBf5cy3aO/ya:kFJAXBjJnJqTb/TBxb31/

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama217

Campaign

1666765529

C2

197.204.53.242:443

105.106.60.149:443

102.159.110.79:995

64.207.237.118:443

156.216.134.70:995

180.151.116.67:443

190.199.97.108:993

206.1.203.0:443

186.188.96.197:443

206.1.128.203:443

201.249.100.208:995

190.75.151.66:2222

198.2.51.242:993

90.165.109.4:2222

71.199.168.185:443

181.56.171.3:995

43.241.159.148:443

41.103.1.16:443

24.207.97.117:443

105.157.86.118:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      50e597f53ce7c3a990da834784c20937c40cc8b468796772e4ebc4b31d474928.dll

    • Size

      157KB

    • MD5

      ad8ba54bcf8815dafcd911dce4b501df

    • SHA1

      2011ef829f0ec8227c64802f8467e6bbade7b8e6

    • SHA256

      50e597f53ce7c3a990da834784c20937c40cc8b468796772e4ebc4b31d474928

    • SHA512

      3da267acbeaaf94bcc90f2833d2742902984b96dbfa1b8ab2f68b11d7570e494965624abeb3327da74be5be70b081f8dd57e7f2159f2abb16094eb52efdf0112

    • SSDEEP

      3072:GbLJEsAXBFa2MAnJuXTb/TBf5cy3aO/ya:kFJAXBjJnJqTb/TBxb31/

    Score
    3/10

MITRE ATT&CK Matrix

Tasks