Overview

overview

10

Static

static

1

b8bab31f57...18.dll

windows7-x64

10

b8bab31f57...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8bab31f5770a26d8f6c783236c88421_JaffaCakes118

  • Size

    407KB

  • Sample

    240822-xfh6psvcqm

  • MD5

    b8bab31f5770a26d8f6c783236c88421

  • SHA1

    ed403fbf3e67310a311c38452c002b99891baa56

  • SHA256

    03d5ade4b4a85f617886f37db7e3be95d9ade2b2d5eaaa6e492661c221cb2c50

  • SHA512

    8782b982f8ddae5096330624d5e6ae14f2845b04039f5b33e1b619901f0d5a933a3f6a5f2abecee9ac31b2bd34c8dc1f4bde0bef42381a51db0ac5aed0419680

  • SSDEEP

    6144:KyPKmlEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesNT3wU7HuAmQ:uTwr03pdf8vhhOKJET5ByQ

Score
10/10
qakbotobama051613729859bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

401.138

Botnet

obama05

Campaign

1613729859

C2

86.160.137.132:443

172.87.157.235:3389

106.51.85.162:443

108.31.15.10:995

38.92.225.121:443

173.184.119.153:995

81.150.181.168:2222

71.187.170.235:443

188.25.63.105:443

71.117.132.169:443

193.248.221.184:2222

85.52.72.32:2222

87.202.87.210:2222

78.185.59.190:443

2.7.116.188:2222

81.97.154.100:443

24.50.118.93:443

98.121.187.78:443

108.29.32.251:443

24.152.219.253:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      b8bab31f5770a26d8f6c783236c88421_JaffaCakes118

    • Size

      407KB

    • MD5

      b8bab31f5770a26d8f6c783236c88421

    • SHA1

      ed403fbf3e67310a311c38452c002b99891baa56

    • SHA256

      03d5ade4b4a85f617886f37db7e3be95d9ade2b2d5eaaa6e492661c221cb2c50

    • SHA512

      8782b982f8ddae5096330624d5e6ae14f2845b04039f5b33e1b619901f0d5a933a3f6a5f2abecee9ac31b2bd34c8dc1f4bde0bef42381a51db0ac5aed0419680

    • SSDEEP

      6144:KyPKmlEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesNT3wU7HuAmQ:uTwr03pdf8vhhOKJET5ByQ

    Score
    10/10
    qakbotobama051613729859bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks