Overview

overview

10

Static

static

volleyed.dat.dll

windows7-x64

10

volleyed.dat.dll

windows10-2004-x64

10

Resubmissions

01-11-2022 09:24

221101-ldjhxabbfp 10

27-10-2022 16:21

221027-ttm52acgb4 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    volleyed.dat.dll

  • Size

    628KB

  • Sample

    221101-ldjhxabbfp

  • MD5

    f412d0aa468548abf9a4c78a39134aca

  • SHA1

    c78dbd41ad80c879909e25048baa939c7a18f359

  • SHA256

    9bea9743ed86d925f88d75077ef37b3a4a6a652bbdd2f0e516efdfbb94fb5e06

  • SHA512

    63074ffadef15ce3c423bd87afd4fab13587c2a499d9271b5a254e6464ca7119aa06eb82d0fc7ccb2cf2f5a2ac4ee24ab7b6b42bc7524394c713596c0507575c

  • SSDEEP

    12288:8x8IFmbH8yS5XXUrIVcxxE/5IOT2LY/O9bBoY//w:R6y8bRZAyhI/LoO9bBoY/4

Score
10/10
qakbotobama2181666870886bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

404.2

Botnet

obama218

Campaign

1666870886

C2

24.206.27.39:443

1.102.156.146:8707

187.1.1.118:44751

172.117.139.142:995

1.181.118.183:31745

45.35.97.45:443

187.0.1.27:28294

58.247.115.126:995

1.24.9.220:42753

187.1.1.186:48208

112.141.184.246:995

201.223.169.238:32100

68.62.199.70:443

45.49.137.80:443

187.0.1.172:28709

102.159.236.29:443

183.242.1.187:1

186.48.161.130:995

191.33.187.192:2222

154.181.228.27:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      volleyed.dat.dll

    • Size

      628KB

    • MD5

      f412d0aa468548abf9a4c78a39134aca

    • SHA1

      c78dbd41ad80c879909e25048baa939c7a18f359

    • SHA256

      9bea9743ed86d925f88d75077ef37b3a4a6a652bbdd2f0e516efdfbb94fb5e06

    • SHA512

      63074ffadef15ce3c423bd87afd4fab13587c2a499d9271b5a254e6464ca7119aa06eb82d0fc7ccb2cf2f5a2ac4ee24ab7b6b42bc7524394c713596c0507575c

    • SSDEEP

      12288:8x8IFmbH8yS5XXUrIVcxxE/5IOT2LY/O9bBoY//w:R6y8bRZAyhI/LoO9bBoY/4

    Score
    10/10
    qakbotobama2181666870886bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks