General

  • Target

    69f3d68441fae3ef19d8a287cd7204ad21235113989b145d55e1b4e721af5f75

  • Size

    374KB

  • Sample

    221121-g61wfabb61

  • MD5

    d2a2e33ea3d67ffefcae46eba6538e31

  • SHA1

    d7f373f328be186c9e57d628c3ed5b645a3c6035

  • SHA256

    69f3d68441fae3ef19d8a287cd7204ad21235113989b145d55e1b4e721af5f75

  • SHA512

    71d4e2fa476ee91ad3ddfd2422fd61c878fa32ccd02a399e4f0347c7b19c13d91b80e6ac232414bdf243365ba80077f8f68d86139794068f8135ae79be034d4a

  • SSDEEP

    6144:XKR66t98Uah1oq7PbQIIJSLiyCE0taaRIC6w/9IPFK+20m6WdMxgYURpi92H4X:w6E1YF7P01JSdCLjqa/9zNdMxgligH8

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

obama223

Campaign

1668757345

C2

68.47.128.161:443

87.65.160.87:995

172.90.139.138:2222

86.175.128.143:443

12.172.173.82:465

71.247.10.63:2083

47.41.154.250:443

91.254.215.167:443

71.31.101.183:443

81.229.117.95:2222

24.4.239.157:443

41.99.177.175:443

92.149.205.238:2222

73.230.28.7:443

47.229.96.60:443

186.188.2.193:443

174.112.25.29:2078

84.35.26.14:995

86.130.9.167:2222

116.74.163.221:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      69f3d68441fae3ef19d8a287cd7204ad21235113989b145d55e1b4e721af5f75

    • Size

      374KB

    • MD5

      d2a2e33ea3d67ffefcae46eba6538e31

    • SHA1

      d7f373f328be186c9e57d628c3ed5b645a3c6035

    • SHA256

      69f3d68441fae3ef19d8a287cd7204ad21235113989b145d55e1b4e721af5f75

    • SHA512

      71d4e2fa476ee91ad3ddfd2422fd61c878fa32ccd02a399e4f0347c7b19c13d91b80e6ac232414bdf243365ba80077f8f68d86139794068f8135ae79be034d4a

    • SSDEEP

      6144:XKR66t98Uah1oq7PbQIIJSLiyCE0taaRIC6w/9IPFK+20m6WdMxgYURpi92H4X:w6E1YF7P01JSdCLjqa/9zNdMxgligH8

MITRE ATT&CK Matrix

Tasks