General

  • Target

    96ba900da741fa0440328467379e7000N

  • Size

    1.1MB

  • Sample

    240827-hwpabszfrq

  • MD5

    96ba900da741fa0440328467379e7000

  • SHA1

    ffb308bd148afa14db0d45f04cc31f8b519966f7

  • SHA256

    99d8ca9f4bc62b21756a6de6dc90348fdfba32449a59761de31e038285ddd515

  • SHA512

    c066fdd4c74dc73030965997d3c23764139519d00a8bd3239e20874f69570374c54019b71423bb5484e1f50f87d33a129eb3265b76b5bf1b673584731ebd4aad

  • SSDEEP

    24576:m0u/lKPLdtj+bZLx1GRFqCbQ45N3OEP+9Gy:m0ilkaz4bx02N3l+9Gy

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama53

Campaign

1622707574

C2

71.187.170.235:443

197.45.110.165:995

96.61.23.88:995

122.58.117.81:995

184.185.103.157:443

136.232.34.70:443

92.96.3.180:2078

83.196.56.65:2222

105.198.236.101:443

24.179.77.236:443

75.67.192.125:443

71.163.222.223:443

24.152.219.253:995

47.22.148.6:443

92.59.35.196:2222

149.28.101.90:443

149.28.98.196:2222

45.32.211.207:995

144.202.38.185:443

45.77.115.208:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      96ba900da741fa0440328467379e7000N

    • Size

      1.1MB

    • MD5

      96ba900da741fa0440328467379e7000

    • SHA1

      ffb308bd148afa14db0d45f04cc31f8b519966f7

    • SHA256

      99d8ca9f4bc62b21756a6de6dc90348fdfba32449a59761de31e038285ddd515

    • SHA512

      c066fdd4c74dc73030965997d3c23764139519d00a8bd3239e20874f69570374c54019b71423bb5484e1f50f87d33a129eb3265b76b5bf1b673584731ebd4aad

    • SSDEEP

      24576:m0u/lKPLdtj+bZLx1GRFqCbQ45N3OEP+9Gy:m0ilkaz4bx02N3l+9Gy

MITRE ATT&CK Enterprise v15

Tasks