General

  • Target

    6d035d195cde1271261038e42c93a8437b40ebf14203c9477c17469f0f4f68ef.dll

  • Size

    593KB

  • Sample

    221116-ta25vabh92

  • MD5

    da07ac5bb78b36d97132c73fdc1e2c20

  • SHA1

    b6d851a98e49eb61e5f5d255f7e4d68e9e313fd2

  • SHA256

    6d035d195cde1271261038e42c93a8437b40ebf14203c9477c17469f0f4f68ef

  • SHA512

    5bc69fa345ab90086e946937bdc214ba25e6dfb9ebf9c65e9d05e52ca3996f96d03a5235548cd28545152e2ca591229e0f96b0044f8bc6564eea39d179179b33

  • SSDEEP

    12288:anbfdUgz1clr4FgZMsAZ68cUMwvLVh5VPnb7D:abfdUggAs8vMsL5dvD

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

obama221

Campaign

1667915095

C2

199.83.165.233:443

24.142.218.202:443

79.166.120.168:995

92.24.200.226:995

151.32.168.124:443

72.88.245.71:443

46.229.194.17:443

142.119.40.220:2222

177.205.114.49:2222

174.104.184.149:443

86.167.26.227:2222

94.15.58.251:443

82.155.111.187:443

2.84.98.228:2222

69.133.162.35:443

92.189.214.236:2222

190.74.23.139:443

47.34.30.133:443

80.103.77.44:2222

82.34.170.37:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      6d035d195cde1271261038e42c93a8437b40ebf14203c9477c17469f0f4f68ef.dll

    • Size

      593KB

    • MD5

      da07ac5bb78b36d97132c73fdc1e2c20

    • SHA1

      b6d851a98e49eb61e5f5d255f7e4d68e9e313fd2

    • SHA256

      6d035d195cde1271261038e42c93a8437b40ebf14203c9477c17469f0f4f68ef

    • SHA512

      5bc69fa345ab90086e946937bdc214ba25e6dfb9ebf9c65e9d05e52ca3996f96d03a5235548cd28545152e2ca591229e0f96b0044f8bc6564eea39d179179b33

    • SSDEEP

      12288:anbfdUgz1clr4FgZMsAZ68cUMwvLVh5VPnb7D:abfdUggAs8vMsL5dvD

MITRE ATT&CK Matrix

Tasks