General

  • Target

    892-59-0x0000000000200000-0x000000000022A000-memory.dmp

  • Size

    168KB

  • Sample

    221120-dy9ltshc8s

  • MD5

    46ffbf350e9056955d3654ebf714015a

  • SHA1

    36e513a6b82613c3577733131de08fcc2ce3ff58

  • SHA256

    ae0b5f079838f0c5a1dec0018383e9294272e50ccd1c17a896b0b915ce712e8d

  • SHA512

    3d41c1f63b8bdec9f9776af015b039ae2aedc61eb70867320836285e309e1f8ece68be2104c48e89cf5cbd845f6a68666aff8e019584f180ef08ee2de3902ba8

  • SSDEEP

    3072:U4GyYt2aOPogV48XOBhkAAJ0yTDATBfZzva83VfO/ya:C2XAgC+OBhxAJZTDATBxe83Vm/

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

obama223

Campaign

1668757345

C2

68.47.128.161:443

87.65.160.87:995

172.90.139.138:2222

86.175.128.143:443

12.172.173.82:465

71.247.10.63:2083

47.41.154.250:443

91.254.215.167:443

71.31.101.183:443

81.229.117.95:2222

24.4.239.157:443

41.99.177.175:443

92.149.205.238:2222

73.230.28.7:443

47.229.96.60:443

186.188.2.193:443

174.112.25.29:2078

84.35.26.14:995

86.130.9.167:2222

116.74.163.221:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      892-59-0x0000000000200000-0x000000000022A000-memory.dmp

    • Size

      168KB

    • MD5

      46ffbf350e9056955d3654ebf714015a

    • SHA1

      36e513a6b82613c3577733131de08fcc2ce3ff58

    • SHA256

      ae0b5f079838f0c5a1dec0018383e9294272e50ccd1c17a896b0b915ce712e8d

    • SHA512

      3d41c1f63b8bdec9f9776af015b039ae2aedc61eb70867320836285e309e1f8ece68be2104c48e89cf5cbd845f6a68666aff8e019584f180ef08ee2de3902ba8

    • SSDEEP

      3072:U4GyYt2aOPogV48XOBhkAAJ0yTDATBfZzva83VfO/ya:C2XAgC+OBhxAJZTDATBxe83Vm/

    Score
    3/10

MITRE ATT&CK Matrix

Tasks