Overview

overview

10

Static

static

10

newst_qbot_obama.dll

windows7-x64

1

newst_qbot_obama.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    newst_qbot_obama.bin

  • Size

    168KB

  • Sample

    221118-a9ghmscb7z

  • MD5

    6ee20df54a3fe0779b34587482489032

  • SHA1

    6e8ca2cd0112f04589151620760290409ec58eb6

  • SHA256

    525c47a20e285efd7491185c1623d18e375f26f62864e73576608fd5c541053f

  • SHA512

    1166aeedd08a447d89c29c71ec4c9322218ec17c201c86dbf564f13e40ac00d3410a81ea1cbec2dbd15082bf9f046edba443339a0ed1a1b4dd7468383ad54812

  • SSDEEP

    3072:9wKKmgbQWxRJ9B0/ITuWA9YNJMAnUFzTBfF5gj/O/yafaY:iZTK/ITuT9YNJHn0zTB95QG/

Score
10/10
qakbotobama2211667915095

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

obama221

Campaign

1667915095

C2

199.83.165.233:443

24.142.218.202:443

79.166.120.168:995

92.24.200.226:995

151.32.168.124:443

72.88.245.71:443

46.229.194.17:443

142.119.40.220:2222

177.205.114.49:2222

174.104.184.149:443

86.167.26.227:2222

94.15.58.251:443

82.155.111.187:443

2.84.98.228:2222

69.133.162.35:443

92.189.214.236:2222

190.74.23.139:443

47.34.30.133:443

80.103.77.44:2222

82.34.170.37:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      newst_qbot_obama.bin

    • Size

      168KB

    • MD5

      6ee20df54a3fe0779b34587482489032

    • SHA1

      6e8ca2cd0112f04589151620760290409ec58eb6

    • SHA256

      525c47a20e285efd7491185c1623d18e375f26f62864e73576608fd5c541053f

    • SHA512

      1166aeedd08a447d89c29c71ec4c9322218ec17c201c86dbf564f13e40ac00d3410a81ea1cbec2dbd15082bf9f046edba443339a0ed1a1b4dd7468383ad54812

    • SSDEEP

      3072:9wKKmgbQWxRJ9B0/ITuWA9YNJMAnUFzTBfF5gj/O/yafaY:iZTK/ITuT9YNJHn0zTB95QG/

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks