General

  • Target

    8735326250.zip

  • Size

    310KB

  • Sample

    230112-nvanfafg97

  • MD5

    9d503876fa3d0fccf62e8ba1d9b0b21f

  • SHA1

    55a90824714ad9eee6f9f3a412c8f85631d47269

  • SHA256

    e59317eb43837d2afce0ddf08b769f276ca4ed75911a672e8fa396c17ab72942

  • SHA512

    00093382fc184f1c2590c0d033edfde74f729a72b47a94fd9a06b4bbfcf843d1577c4361985c2396ec1b124d3a9056ddd2d9a3b5f971bfc901f44185b7868396

  • SSDEEP

    6144:werLGORxw+cJ0v9ffHmWJWHAfBY7lL7hkeqH4PoHYQMsfjhdDAC+3C:jfhxw6RfHmWJ5BYNFkeU4Zs7AXC

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama215

Campaign

1666597712

C2

156.220.185.41:993

37.8.67.5:443

156.197.230.148:995

27.110.134.202:995

172.117.139.142:995

208.78.220.120:443

105.111.102.145:443

102.157.250.192:995

58.247.115.126:995

2.88.206.121:443

189.110.3.60:2222

190.207.137.189:2222

105.98.89.54:443

190.74.248.136:443

189.129.38.158:2222

200.109.204.20:2222

105.103.63.213:443

190.27.103.174:995

206.1.175.95:443

167.58.254.85:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      933005e9963a92ce6492214be5c8d9711d8d231c75424fcbba9678f686626b74

    • Size

      537KB

    • MD5

      de181fce4f02e3f9c00f48ff9efe9f8a

    • SHA1

      418c637aee862071ac875e6ec9fff3c8f5816c76

    • SHA256

      933005e9963a92ce6492214be5c8d9711d8d231c75424fcbba9678f686626b74

    • SHA512

      d66a5416157027af0d80f94a38147447032fc9bed79263d8ac129e8413049a44a8b1bd3d23513028cea7c4742c6dd0547b308c057c0a160c2db03aefa944c941

    • SSDEEP

      12288:C3jf0sjnEhDnvQhfodTGDAg8BE7WErKzS+r:VswDvEfwtksS

MITRE ATT&CK Matrix

Tasks