General

  • Target

    rhinestones.temp

  • Size

    374KB

  • Sample

    221118-v5ztmsaa82

  • MD5

    574ab604e9f63bb291f72fadc57a1fee

  • SHA1

    51d1c97a8941edbbb0f6bf3674dd65c924c7a6cc

  • SHA256

    cd76faad5c50e0880cca3bdc7751160761afe39be0c76b5df4240b61eb04cef7

  • SHA512

    7804ff0c97bbd6f40e89c066e16c8a906b5d8c34ca3bd42b4bc040a79e6f0c749f8599b59672f8a30631741b6aa1dd466f2aff195ac800ae11c84a90e3352fe1

  • SSDEEP

    6144:XKR66t98Uah1oq7PbQIIJSLiyCE0taaRIC6w/9IDFK+20m6WdMxgYURpi92H4X:w6E1YF7P01JSdCLjqa/9nNdMxgligH8

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

obama223

Campaign

1668757345

C2

68.47.128.161:443

87.65.160.87:995

172.90.139.138:2222

86.175.128.143:443

12.172.173.82:465

71.247.10.63:2083

47.41.154.250:443

91.254.215.167:443

71.31.101.183:443

81.229.117.95:2222

24.4.239.157:443

41.99.177.175:443

92.149.205.238:2222

73.230.28.7:443

47.229.96.60:443

186.188.2.193:443

174.112.25.29:2078

84.35.26.14:995

86.130.9.167:2222

116.74.163.221:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      rhinestones.temp

    • Size

      374KB

    • MD5

      574ab604e9f63bb291f72fadc57a1fee

    • SHA1

      51d1c97a8941edbbb0f6bf3674dd65c924c7a6cc

    • SHA256

      cd76faad5c50e0880cca3bdc7751160761afe39be0c76b5df4240b61eb04cef7

    • SHA512

      7804ff0c97bbd6f40e89c066e16c8a906b5d8c34ca3bd42b4bc040a79e6f0c749f8599b59672f8a30631741b6aa1dd466f2aff195ac800ae11c84a90e3352fe1

    • SSDEEP

      6144:XKR66t98Uah1oq7PbQIIJSLiyCE0taaRIC6w/9IDFK+20m6WdMxgYURpi92H4X:w6E1YF7P01JSdCLjqa/9nNdMxgligH8

MITRE ATT&CK Matrix

Tasks