General

  • Target

    2d0000.dll

  • Size

    168KB

  • Sample

    221116-139hyshb4z

  • MD5

    393fc5e3487fd2623a8da04b7045a94c

  • SHA1

    15e7d42be1e1791ace16b5af6ddcf494b25222bb

  • SHA256

    e285192bb507aec08c42a4d7c85747e2fb13dc0816953d89fd648060880cba90

  • SHA512

    e9e6508ce2ffecedd3b5a963af12b1758c1710b13d2c315c060529df026204384643f9bdc498bc2340eff614a541200c72d0db25cbcda97a74eeb044923d1ed2

  • SSDEEP

    3072:Nwgk0u7Y87D5fghExoUAiJGizMHTBfZ4gJpO/yafaY:e/P2hExoBiJHzMHTBR4OA/

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

obama221

Campaign

1667915095

C2

199.83.165.233:443

24.142.218.202:443

79.166.120.168:995

92.24.200.226:995

151.32.168.124:443

72.88.245.71:443

46.229.194.17:443

142.119.40.220:2222

177.205.114.49:2222

174.104.184.149:443

86.167.26.227:2222

94.15.58.251:443

82.155.111.187:443

2.84.98.228:2222

69.133.162.35:443

92.189.214.236:2222

190.74.23.139:443

47.34.30.133:443

80.103.77.44:2222

82.34.170.37:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      2d0000.dll

    • Size

      168KB

    • MD5

      393fc5e3487fd2623a8da04b7045a94c

    • SHA1

      15e7d42be1e1791ace16b5af6ddcf494b25222bb

    • SHA256

      e285192bb507aec08c42a4d7c85747e2fb13dc0816953d89fd648060880cba90

    • SHA512

      e9e6508ce2ffecedd3b5a963af12b1758c1710b13d2c315c060529df026204384643f9bdc498bc2340eff614a541200c72d0db25cbcda97a74eeb044923d1ed2

    • SSDEEP

      3072:Nwgk0u7Y87D5fghExoUAiJGizMHTBfZ4gJpO/yafaY:e/P2hExoBiJHzMHTBR4OA/

MITRE ATT&CK Matrix

Tasks