General

  • Target

    7fce886761909b062c80e77e255dc7e0N.exe

  • Size

    1.1MB

  • Sample

    240827-dcy8za1dkn

  • MD5

    7fce886761909b062c80e77e255dc7e0

  • SHA1

    654167ab44617855002ec7099cd76904c4200893

  • SHA256

    660b18bc04ab05b764941e61f161e2ed1008d890e52713511cac518cfbba4c77

  • SHA512

    1051f5b676c95d96ee1d3794f2221b3c179bc4592666340434fe94bbd6af99e8250138ce1e84d1a6f167cc62fa81b260b2ea63a257b112926cee5ff19265fc26

  • SSDEEP

    12288:nmNDiDQ21Elifgbhc5ZbqWDyALUvNi8KaEIg9teiDqd+Ci6T1l84A79hbi:Mek2CBhcbL8vEnvnZC1Tz8r79hbi

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama53

Campaign

1622633996

C2

96.61.23.88:995

86.220.62.251:2222

71.74.12.34:443

75.67.192.125:443

24.152.219.253:995

105.198.236.101:443

24.179.77.236:443

47.22.148.6:443

92.59.35.196:2222

81.97.154.100:443

207.246.116.237:443

207.246.77.75:995

45.32.211.207:2222

45.77.115.208:443

149.28.98.196:443

45.77.115.208:2222

144.202.38.185:995

45.77.115.208:8443

207.246.77.75:8443

207.246.77.75:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      7fce886761909b062c80e77e255dc7e0N.exe

    • Size

      1.1MB

    • MD5

      7fce886761909b062c80e77e255dc7e0

    • SHA1

      654167ab44617855002ec7099cd76904c4200893

    • SHA256

      660b18bc04ab05b764941e61f161e2ed1008d890e52713511cac518cfbba4c77

    • SHA512

      1051f5b676c95d96ee1d3794f2221b3c179bc4592666340434fe94bbd6af99e8250138ce1e84d1a6f167cc62fa81b260b2ea63a257b112926cee5ff19265fc26

    • SSDEEP

      12288:nmNDiDQ21Elifgbhc5ZbqWDyALUvNi8KaEIg9teiDqd+Ci6T1l84A79hbi:Mek2CBhcbL8vEnvnZC1Tz8r79hbi

MITRE ATT&CK Enterprise v15

Tasks