General

  • Target

    0814681613393556154154ded4bec81fbc2fa05b895c949fe8a914288dc958ef

  • Size

    386KB

  • Sample

    221209-xf825adg83

  • MD5

    9e8b95a47595bdd269a946baf7ec7004

  • SHA1

    aa485992b4d3e4fbff6332b89b8c8ee41e026c3e

  • SHA256

    0814681613393556154154ded4bec81fbc2fa05b895c949fe8a914288dc958ef

  • SHA512

    59c54113670e817a6ced3c6dc740db262b917f04a0402ae684a69cc5ca5e9f17c2abc5d6f5045faaffc96e6fa431e16656211acc42b5b48000717db5bb4a5d52

  • SSDEEP

    6144:XtgTFlqteWTBa5WsoUReNsyLK9w8WqniKS9jyA9yjHHXsBcfmL/p+LIORL6qYFYM:d8z4TU5WsoURzN9dtniPHlQEFYM

Malware Config

Extracted

Family

qakbot

Version

403.914

Botnet

obama210

Campaign

1665041236

C2

41.104.205.128:443

134.35.6.76:443

197.202.163.4:443

181.164.194.228:443

105.159.124.224:443

197.158.89.85:443

41.96.33.236:443

181.141.3.126:443

123.22.7.132:443

163.182.177.80:443

41.248.72.229:8443

41.100.62.129:443

68.83.169.91:443

190.29.228.61:443

160.176.249.11:995

41.107.54.99:443

94.52.127.44:443

105.69.155.85:995

45.227.251.167:2222

197.206.141.97:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      0814681613393556154154ded4bec81fbc2fa05b895c949fe8a914288dc958ef

    • Size

      386KB

    • MD5

      9e8b95a47595bdd269a946baf7ec7004

    • SHA1

      aa485992b4d3e4fbff6332b89b8c8ee41e026c3e

    • SHA256

      0814681613393556154154ded4bec81fbc2fa05b895c949fe8a914288dc958ef

    • SHA512

      59c54113670e817a6ced3c6dc740db262b917f04a0402ae684a69cc5ca5e9f17c2abc5d6f5045faaffc96e6fa431e16656211acc42b5b48000717db5bb4a5d52

    • SSDEEP

      6144:XtgTFlqteWTBa5WsoUReNsyLK9w8WqniKS9jyA9yjHHXsBcfmL/p+LIORL6qYFYM:d8z4TU5WsoURzN9dtniPHlQEFYM

MITRE ATT&CK Matrix

Tasks