General

  • Target

    5a227dcfdc3e0e12551ddb0a48ef76d0N

  • Size

    1.1MB

  • Sample

    240826-de5hrssfkj

  • MD5

    5a227dcfdc3e0e12551ddb0a48ef76d0

  • SHA1

    3a0e143b0e713f11ae0438a41f056d1480599fdc

  • SHA256

    c6da2ba0d4ab0ecbb1f5a4306fcd7268400d653f88b1aa917cbf61e5ddeb6fe5

  • SHA512

    05ed9efefe838174c09d0980a1bf400d41dcdd02ed03d5a4bd1fba79a42933d971d8a52328e489b8e8f126e84dddeb87b73abe903532853ef6f078a9bdb3c4c0

  • SSDEEP

    24576:m0u/lKPLdtj+bZLx1GRFqCbQ45N3O2P+9Gy:m0ilkaz4bx02N3j+9Gy

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama53

Campaign

1622707574

C2

71.187.170.235:443

197.45.110.165:995

96.61.23.88:995

122.58.117.81:995

184.185.103.157:443

136.232.34.70:443

92.96.3.180:2078

83.196.56.65:2222

105.198.236.101:443

24.179.77.236:443

75.67.192.125:443

71.163.222.223:443

24.152.219.253:995

47.22.148.6:443

92.59.35.196:2222

149.28.101.90:443

149.28.98.196:2222

45.32.211.207:995

144.202.38.185:443

45.77.115.208:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      5a227dcfdc3e0e12551ddb0a48ef76d0N

    • Size

      1.1MB

    • MD5

      5a227dcfdc3e0e12551ddb0a48ef76d0

    • SHA1

      3a0e143b0e713f11ae0438a41f056d1480599fdc

    • SHA256

      c6da2ba0d4ab0ecbb1f5a4306fcd7268400d653f88b1aa917cbf61e5ddeb6fe5

    • SHA512

      05ed9efefe838174c09d0980a1bf400d41dcdd02ed03d5a4bd1fba79a42933d971d8a52328e489b8e8f126e84dddeb87b73abe903532853ef6f078a9bdb3c4c0

    • SSDEEP

      24576:m0u/lKPLdtj+bZLx1GRFqCbQ45N3O2P+9Gy:m0ilkaz4bx02N3j+9Gy

MITRE ATT&CK Enterprise v15

Tasks