General

  • Target

    a29c8e4aafea22af5a95a179f5e4921a42c2270c9b425fc769e452d41684343b

  • Size

    1.1MB

  • Sample

    240827-ccjb3syeqr

  • MD5

    144f04d9ecd64482477303d502209f43

  • SHA1

    b76651cd5c331929b0dbea0abd6669d69280a1b0

  • SHA256

    a29c8e4aafea22af5a95a179f5e4921a42c2270c9b425fc769e452d41684343b

  • SHA512

    e1085c51bee44fce832569d2c91870eb4849640ed9203435996501e40f686b5a63bb9d9559c3ba815a3e21d595a3b8acce9dee1b96de1b0faf9385d052eef672

  • SSDEEP

    12288:nmNDiDQ21Elifgbhc5ZbqWDyALUvNi8KaEIgZteiDqd+Ci6T1l84A79hbi:Mek2CBhcbL8vEnTnZC1Tz8r79hbi

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama53

Campaign

1622633996

C2

96.61.23.88:995

86.220.62.251:2222

71.74.12.34:443

75.67.192.125:443

24.152.219.253:995

105.198.236.101:443

24.179.77.236:443

47.22.148.6:443

92.59.35.196:2222

81.97.154.100:443

207.246.116.237:443

207.246.77.75:995

45.32.211.207:2222

45.77.115.208:443

149.28.98.196:443

45.77.115.208:2222

144.202.38.185:995

45.77.115.208:8443

207.246.77.75:8443

207.246.77.75:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      a29c8e4aafea22af5a95a179f5e4921a42c2270c9b425fc769e452d41684343b

    • Size

      1.1MB

    • MD5

      144f04d9ecd64482477303d502209f43

    • SHA1

      b76651cd5c331929b0dbea0abd6669d69280a1b0

    • SHA256

      a29c8e4aafea22af5a95a179f5e4921a42c2270c9b425fc769e452d41684343b

    • SHA512

      e1085c51bee44fce832569d2c91870eb4849640ed9203435996501e40f686b5a63bb9d9559c3ba815a3e21d595a3b8acce9dee1b96de1b0faf9385d052eef672

    • SSDEEP

      12288:nmNDiDQ21Elifgbhc5ZbqWDyALUvNi8KaEIgZteiDqd+Ci6T1l84A79hbi:Mek2CBhcbL8vEnTnZC1Tz8r79hbi

MITRE ATT&CK Enterprise v15

Tasks