General

  • Target

    454cb8b8d9684e2c4001b625098ceed5d9046306065bea5195517c046782c1e3

  • Size

    420KB

  • Sample

    221027-n5kw6acad2

  • MD5

    5d29db25460dcc29c2e8a2aac5fe00df

  • SHA1

    70f48a080b570b055918a7624f7d22e071161b10

  • SHA256

    454cb8b8d9684e2c4001b625098ceed5d9046306065bea5195517c046782c1e3

  • SHA512

    a2af9e81bfb5882647339a38d328bbf93cb0f01fc0e9b5a0cba4dcb6eeaafb5052194091acbaba04b2bee8f884d58d300eeac61ad84b2141ef49f85e7c12e1e3

  • SSDEEP

    6144:5MVSKlGqB/JXPX+cRBLrgq/6qot7FZyRxJt2gRxhYU1sNmcvVR2l2HM+LJUaoF2:OVPlBJXWcDkq/GNU1E1T5Hb1

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama217

Campaign

1666765529

C2

197.204.53.242:443

105.106.60.149:443

102.159.110.79:995

64.207.237.118:443

156.216.134.70:995

180.151.116.67:443

190.199.97.108:993

206.1.203.0:443

186.188.96.197:443

206.1.128.203:443

201.249.100.208:995

190.75.151.66:2222

198.2.51.242:993

90.165.109.4:2222

71.199.168.185:443

181.56.171.3:995

43.241.159.148:443

41.103.1.16:443

24.207.97.117:443

105.157.86.118:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Extracted

Family

qakbot

Attributes
  • salt

    ?E !0=36M_/4;33! rDfPrXc�ssows

Targets

    • Target

      454cb8b8d9684e2c4001b625098ceed5d9046306065bea5195517c046782c1e3

    • Size

      420KB

    • MD5

      5d29db25460dcc29c2e8a2aac5fe00df

    • SHA1

      70f48a080b570b055918a7624f7d22e071161b10

    • SHA256

      454cb8b8d9684e2c4001b625098ceed5d9046306065bea5195517c046782c1e3

    • SHA512

      a2af9e81bfb5882647339a38d328bbf93cb0f01fc0e9b5a0cba4dcb6eeaafb5052194091acbaba04b2bee8f884d58d300eeac61ad84b2141ef49f85e7c12e1e3

    • SSDEEP

      6144:5MVSKlGqB/JXPX+cRBLrgq/6qot7FZyRxJt2gRxhYU1sNmcvVR2l2HM+LJUaoF2:OVPlBJXWcDkq/GNU1E1T5Hb1

MITRE ATT&CK Matrix

Tasks