Resubmissions

22-09-2023 16:16

230922-tra3pabb43 10

23-06-2023 10:04

230623-l322jsea54 3

23-06-2023 10:02

230623-l245hsea52 3

General

  • Target

    98bf24844d138dfd50188f3325f13ea3a1cde4d650900ae1d6820a2b1d4a59fd

  • Size

    1.3MB

  • Sample

    230922-tra3pabb43

  • MD5

    bc48507c05a4ac575e5c398a39c5da86

  • SHA1

    2e1a1291c0606ed7205b9506cf1e73cc58df38ac

  • SHA256

    98bf24844d138dfd50188f3325f13ea3a1cde4d650900ae1d6820a2b1d4a59fd

  • SHA512

    21d367d82765f7139deaf53c8e5ada4c9c50b5733cdc0939e4b9407a9160f85f54e5dd34682e885a18a7b87823eac1b7e7f42da5a3e8c78d0f1a4bc00e3bd06a

  • SSDEEP

    24576:QbynSJg2XBk53xIRcJaELHmfXOSNPSp0ExTqt2AO9GeM4ykQ:QbkS7XB1EsOSNPSp0EAt2bUeM4ykQ

Malware Config

Extracted

Family

qakbot

Version

404.1405

Botnet

obama271

Campaign

1687438904

C2

70.28.50.223:2083

103.141.50.79:995

184.182.66.109:443

122.184.143.82:443

91.254.145.252:443

37.14.229.220:2222

64.229.117.208:2222

77.126.99.230:443

87.252.106.235:995

12.172.173.82:32101

95.230.110.222:995

88.169.33.180:2222

70.28.50.223:1194

72.80.94.230:443

191.191.1.254:995

209.171.160.69:995

45.62.67.129:443

24.234.80.122:995

81.150.169.174:2222

121.121.100.202:995

Targets

    • Target

      98bf24844d138dfd50188f3325f13ea3a1cde4d650900ae1d6820a2b1d4a59fd

    • Size

      1.3MB

    • MD5

      bc48507c05a4ac575e5c398a39c5da86

    • SHA1

      2e1a1291c0606ed7205b9506cf1e73cc58df38ac

    • SHA256

      98bf24844d138dfd50188f3325f13ea3a1cde4d650900ae1d6820a2b1d4a59fd

    • SHA512

      21d367d82765f7139deaf53c8e5ada4c9c50b5733cdc0939e4b9407a9160f85f54e5dd34682e885a18a7b87823eac1b7e7f42da5a3e8c78d0f1a4bc00e3bd06a

    • SSDEEP

      24576:QbynSJg2XBk53xIRcJaELHmfXOSNPSp0ExTqt2AO9GeM4ykQ:QbkS7XB1EsOSNPSp0EAt2bUeM4ykQ

MITRE ATT&CK Matrix

Tasks