General

  • Target

    1720-98-0x0000000000230000-0x000000000025A000-memory.dmp

  • Size

    168KB

  • Sample

    221208-l6vfwahf33

  • MD5

    2d6e0db5f3db25e93a261dd94b5c43c8

  • SHA1

    fef1324f2b21f9c452798cc7bfd8c9d4a089834e

  • SHA256

    c3bb38af3208f68f4d67e4b074116f3cdde52e4181be6ef00931fd258d3906aa

  • SHA512

    96362954d66a2e489fa9d821bc724359f490b253f3e0c8c0eee777d05b8defe1250d14d31d75469dffad8062c7ba8d4a67d3351a6b840724bfae4a6bf8803b39

  • SSDEEP

    3072:AgqB4I82sX06tn/E2bAoJNfdvTTBf1gRO/yapv:R7pXLt/E2MoJddvTTBtgo/

Malware Config

Extracted

Family

qakbot

Version

404.46

Botnet

obama226

Campaign

1670237875

C2

76.100.159.250:443

66.191.69.18:995

186.64.67.9:443

50.90.249.161:443

109.150.179.158:2222

92.149.205.238:2222

86.165.15.180:2222

41.44.19.36:995

78.17.157.5:443

173.18.126.3:443

75.99.125.235:2222

172.90.139.138:2222

27.99.45.237:2222

91.68.227.219:443

12.172.173.82:993

103.144.201.62:2078

12.172.173.82:990

173.239.94.212:443

91.169.12.198:32100

24.64.114.59:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1720-98-0x0000000000230000-0x000000000025A000-memory.dmp

    • Size

      168KB

    • MD5

      2d6e0db5f3db25e93a261dd94b5c43c8

    • SHA1

      fef1324f2b21f9c452798cc7bfd8c9d4a089834e

    • SHA256

      c3bb38af3208f68f4d67e4b074116f3cdde52e4181be6ef00931fd258d3906aa

    • SHA512

      96362954d66a2e489fa9d821bc724359f490b253f3e0c8c0eee777d05b8defe1250d14d31d75469dffad8062c7ba8d4a67d3351a6b840724bfae4a6bf8803b39

    • SSDEEP

      3072:AgqB4I82sX06tn/E2bAoJNfdvTTBf1gRO/yapv:R7pXLt/E2MoJddvTTBtgo/

    Score
    3/10

MITRE ATT&CK Matrix

Tasks