General

  • Target

    442437ccaac1b92cbbacc116bdf7619a94008d8fc6b08278906859b291b74673.dll

  • Size

    593KB

  • Sample

    221116-pvkn3seh2t

  • MD5

    22becb344b87f568b4e759531fb07f1d

  • SHA1

    826bd892ecdf25766ad4aa08e939bcd0847f25ba

  • SHA256

    442437ccaac1b92cbbacc116bdf7619a94008d8fc6b08278906859b291b74673

  • SHA512

    4bea0cb1e42d8450582bc0a9c7ff2c33461fc991512b3c662783d0dd33c41b78e56ad8278720c9a422d3a9788b496c46d9923fbb9d3072814dfe6d6cf520befb

  • SSDEEP

    12288:3nbfdUgz1clr4FgZMsA968cUMwvLVh5VPnbNw:3bfdUggA48vMsL5dJw

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

obama221

Campaign

1667915095

C2

199.83.165.233:443

24.142.218.202:443

79.166.120.168:995

92.24.200.226:995

151.32.168.124:443

72.88.245.71:443

46.229.194.17:443

142.119.40.220:2222

177.205.114.49:2222

174.104.184.149:443

86.167.26.227:2222

94.15.58.251:443

82.155.111.187:443

2.84.98.228:2222

69.133.162.35:443

92.189.214.236:2222

190.74.23.139:443

47.34.30.133:443

80.103.77.44:2222

82.34.170.37:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      442437ccaac1b92cbbacc116bdf7619a94008d8fc6b08278906859b291b74673.dll

    • Size

      593KB

    • MD5

      22becb344b87f568b4e759531fb07f1d

    • SHA1

      826bd892ecdf25766ad4aa08e939bcd0847f25ba

    • SHA256

      442437ccaac1b92cbbacc116bdf7619a94008d8fc6b08278906859b291b74673

    • SHA512

      4bea0cb1e42d8450582bc0a9c7ff2c33461fc991512b3c662783d0dd33c41b78e56ad8278720c9a422d3a9788b496c46d9923fbb9d3072814dfe6d6cf520befb

    • SSDEEP

      12288:3nbfdUgz1clr4FgZMsA968cUMwvLVh5VPnbNw:3bfdUggA48vMsL5dJw

MITRE ATT&CK Matrix

Tasks