General

  • Target

    1c0000.dll

  • Size

    164KB

  • Sample

    221103-xq22kagben

  • MD5

    de3b07bddd20814a9dbd1d4663f47ba0

  • SHA1

    c451dfc51cebfca944e87376a0d248a82c4317b4

  • SHA256

    4405116c97462f3f6e050ec377c9a07899294177b0ad4e34e5da54ceb3c140c6

  • SHA512

    57e664164c4c7fb6474d81a4cafccb60fcad6ffa770e595a1688fc9e01956f0ba82c6a17e521ce60aba26ebf012990a5b01d934c34ce308ef366fdfbceb88fd4

  • SSDEEP

    3072:xbLJEsAXBFa2MAnJuXTw/TBf5Vy3LO/ya:FFJAXBjJnJqTw/TBxU3a/

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama217

Campaign

1666765529

C2

197.204.53.242:443

105.106.60.149:443

102.159.110.79:995

64.207.237.118:443

156.216.134.70:995

180.151.116.67:443

190.199.97.108:993

206.1.203.0:443

186.188.96.197:443

206.1.128.203:443

201.249.100.208:995

190.75.151.66:2222

198.2.51.242:993

90.165.109.4:2222

71.199.168.185:443

181.56.171.3:995

43.241.159.148:443

41.103.1.16:443

24.207.97.117:443

105.157.86.118:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1c0000.dll

    • Size

      164KB

    • MD5

      de3b07bddd20814a9dbd1d4663f47ba0

    • SHA1

      c451dfc51cebfca944e87376a0d248a82c4317b4

    • SHA256

      4405116c97462f3f6e050ec377c9a07899294177b0ad4e34e5da54ceb3c140c6

    • SHA512

      57e664164c4c7fb6474d81a4cafccb60fcad6ffa770e595a1688fc9e01956f0ba82c6a17e521ce60aba26ebf012990a5b01d934c34ce308ef366fdfbceb88fd4

    • SSDEEP

      3072:xbLJEsAXBFa2MAnJuXTw/TBf5Vy3LO/ya:FFJAXBjJnJqTw/TBxU3a/

MITRE ATT&CK Matrix

Tasks