General

  • Target

    e65a5a64b7ee7f0c916b7215c87de890N.exe

  • Size

    805KB

  • Sample

    240827-m36keaxdla

  • MD5

    e65a5a64b7ee7f0c916b7215c87de890

  • SHA1

    917647522bc7f105e757f7ff0e2203cb9a4c8620

  • SHA256

    687e1d9eed339c2702c39833cf733874bd663f59c129c6d9634058396c53fb25

  • SHA512

    ed4785abf371d68b48246a3446983d1cf67d85b5e82e22e5ae1fa0e11a34cbee7ea3179d33dbc8c97d4b0d0228614b3045e579d364b11793ec521623bb69f222

  • SSDEEP

    24576:fDoXmEsRxwC/d+2aHaz5WeHocqi8OREN:fDdxX/t5WeHdA

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

biden52

Campaign

1622646137

C2

184.185.103.157:443

71.187.170.235:443

86.220.62.251:2222

75.67.192.125:443

96.61.23.88:995

92.96.3.180:2078

72.252.201.69:443

24.152.219.253:995

105.198.236.101:443

24.179.77.236:443

189.210.115.207:443

81.97.154.100:443

47.22.148.6:443

45.77.115.208:443

149.28.98.196:443

45.77.115.208:2222

144.202.38.185:995

45.77.115.208:8443

207.246.77.75:8443

207.246.77.75:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      e65a5a64b7ee7f0c916b7215c87de890N.exe

    • Size

      805KB

    • MD5

      e65a5a64b7ee7f0c916b7215c87de890

    • SHA1

      917647522bc7f105e757f7ff0e2203cb9a4c8620

    • SHA256

      687e1d9eed339c2702c39833cf733874bd663f59c129c6d9634058396c53fb25

    • SHA512

      ed4785abf371d68b48246a3446983d1cf67d85b5e82e22e5ae1fa0e11a34cbee7ea3179d33dbc8c97d4b0d0228614b3045e579d364b11793ec521623bb69f222

    • SSDEEP

      24576:fDoXmEsRxwC/d+2aHaz5WeHocqi8OREN:fDdxX/t5WeHdA

MITRE ATT&CK Enterprise v15

Tasks