General

  • Target

    9375ed9530797e3a8de5508a220606f0N

  • Size

    1.1MB

  • Sample

    240826-g5bj6a1dmm

  • MD5

    9375ed9530797e3a8de5508a220606f0

  • SHA1

    6c9463ede18dba1f961df6a9a3a99bd2d35ff662

  • SHA256

    0603288041ce1f3776c793c3f112ef8538fb08f95ddbed6c9fc9c721e8dcc3a1

  • SHA512

    350f75437e3131153cccdffa440f965d0a58d002745b6a10fe814f4b3441edd0ca4f0fec158c2c0aa70c4a98695674fbbe8ccca1bcfbcc3101f5e2fa60a6fb39

  • SSDEEP

    24576:m0u/lKPLdtj+bZLx1GRFqCbQ45N3OgP+9Gy:m0ilkaz4bx02N3h+9Gy

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama53

Campaign

1622707574

C2

71.187.170.235:443

197.45.110.165:995

96.61.23.88:995

122.58.117.81:995

184.185.103.157:443

136.232.34.70:443

92.96.3.180:2078

83.196.56.65:2222

105.198.236.101:443

24.179.77.236:443

75.67.192.125:443

71.163.222.223:443

24.152.219.253:995

47.22.148.6:443

92.59.35.196:2222

149.28.101.90:443

149.28.98.196:2222

45.32.211.207:995

144.202.38.185:443

45.77.115.208:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      9375ed9530797e3a8de5508a220606f0N

    • Size

      1.1MB

    • MD5

      9375ed9530797e3a8de5508a220606f0

    • SHA1

      6c9463ede18dba1f961df6a9a3a99bd2d35ff662

    • SHA256

      0603288041ce1f3776c793c3f112ef8538fb08f95ddbed6c9fc9c721e8dcc3a1

    • SHA512

      350f75437e3131153cccdffa440f965d0a58d002745b6a10fe814f4b3441edd0ca4f0fec158c2c0aa70c4a98695674fbbe8ccca1bcfbcc3101f5e2fa60a6fb39

    • SSDEEP

      24576:m0u/lKPLdtj+bZLx1GRFqCbQ45N3OgP+9Gy:m0ilkaz4bx02N3h+9Gy

MITRE ATT&CK Enterprise v15

Tasks