Overview

overview

10

Static

static

3

2359e5ff4d...18.dll

windows7-x64

10

2359e5ff4d...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2359e5ff4ddb2431661a2575069b9228_JaffaCakes118
  • Size 378KB
  • Sample240703-w7x89stfmd
  • SHA256 9321f7c0333333189cea832082c33d28e3d8c568762b085939aea86b1d407dca
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
qakbotobama1041632729661bankerevasionstealertrojan

Malware Config

Extracted

Family

  • qakbot

Version

  • 402.343

Botnet

  • obama104

Campaign

  • 1632729661

C2

  • 95.77.223.148:443

  • 47.22.148.6:443

  • 89.101.97.139:443

  • 27.223.92.142:995

  • 120.151.47.189:443

  • 136.232.34.70:443

  • 120.150.218.241:995

  • 185.250.148.74:443

  • 181.118.183.94:443

  • 140.82.49.12:443

  • 67.165.206.193:993

  • 103.148.120.144:443

  • 71.74.12.34:443

  • 76.25.142.196:443

  • 73.151.236.31:443

  • 173.21.10.71:2222

  • 75.188.35.168:443

  • 2.178.88.145:61202

  • 71.80.168.245:443

  • 45.46.53.140:2222

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target
      2359e5ff4ddb2431661a2575069b9228_JaffaCakes118
    • Size 378KB
    • SHA256 9321f7c0333333189cea832082c33d28e3d8c568762b085939aea86b1d407dca
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    qakbotobama1041632729661bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks