General

  • Target

    c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805.dll

  • Size

    593KB

  • Sample

    221116-qtmygsba72

  • MD5

    6ee4c290dcd0ed06802223fdf557f5d8

  • SHA1

    f5fa5ca16ff0d9574b7030c27933fe8ff0e0f3c6

  • SHA256

    c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805

  • SHA512

    a104865030f9b4aac30a7f4b7ebe312bdff2b027654c8483a741336cf8f2e28df4ac371ef69cede766e5527f5c2360fd0a68f2ec2eca8c55feea32c6c5b14405

  • SSDEEP

    12288:GnbfdUgz1clr4FgZMsAn68cUMwvLVh5VPnbf3:GbfdUggA68vMsL5db3

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

obama221

Campaign

1667915095

C2

199.83.165.233:443

24.142.218.202:443

79.166.120.168:995

92.24.200.226:995

151.32.168.124:443

72.88.245.71:443

46.229.194.17:443

142.119.40.220:2222

177.205.114.49:2222

174.104.184.149:443

86.167.26.227:2222

94.15.58.251:443

82.155.111.187:443

2.84.98.228:2222

69.133.162.35:443

92.189.214.236:2222

190.74.23.139:443

47.34.30.133:443

80.103.77.44:2222

82.34.170.37:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805.dll

    • Size

      593KB

    • MD5

      6ee4c290dcd0ed06802223fdf557f5d8

    • SHA1

      f5fa5ca16ff0d9574b7030c27933fe8ff0e0f3c6

    • SHA256

      c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805

    • SHA512

      a104865030f9b4aac30a7f4b7ebe312bdff2b027654c8483a741336cf8f2e28df4ac371ef69cede766e5527f5c2360fd0a68f2ec2eca8c55feea32c6c5b14405

    • SSDEEP

      12288:GnbfdUgz1clr4FgZMsAn68cUMwvLVh5VPnbf3:GbfdUggA68vMsL5db3

MITRE ATT&CK Matrix

Tasks