General

  • Target

    cb3ed0fab377c48841597c09e0fec1f1_JaffaCakes118

  • Size

    506KB

  • Sample

    240830-va2dzsthph

  • MD5

    cb3ed0fab377c48841597c09e0fec1f1

  • SHA1

    6e74569cc356139e1892732fcc97a6ec94c6240e

  • SHA256

    6cd4744b21f0f2f3145ff26150d7c8db36da68a4cf5d7ba7346cd2a31569c871

  • SHA512

    ecb20de8b435db88f766dd03344ca96a06c7b60392deafdb21fa4e1b2f675a33ed7117294d74bf6395cb79157b438fca7ea53ad26d5cfdc578da59703d662079

  • SSDEEP

    12288:4W7OY3YTn155L/9hFTMq2EKMAcuCSF7aqxETMNIp0Fh6zUV:4Wf3YTnJLBv2EKMAcOgqxETMNIpM6Y

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama108

Campaign

1633342139

C2

206.47.134.234:2222

73.230.205.91:443

190.198.206.189:2222

103.246.130.2:20

103.246.130.122:20

81.250.153.227:2222

167.248.100.227:443

37.210.152.224:995

96.57.188.174:2078

2.99.100.134:2222

217.17.56.163:2222

217.17.56.163:2078

41.228.22.180:443

136.232.34.70:443

68.186.192.69:443

167.248.111.245:443

81.241.252.59:2078

94.200.181.154:443

96.46.103.226:443

187.116.124.82:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      cb3ed0fab377c48841597c09e0fec1f1_JaffaCakes118

    • Size

      506KB

    • MD5

      cb3ed0fab377c48841597c09e0fec1f1

    • SHA1

      6e74569cc356139e1892732fcc97a6ec94c6240e

    • SHA256

      6cd4744b21f0f2f3145ff26150d7c8db36da68a4cf5d7ba7346cd2a31569c871

    • SHA512

      ecb20de8b435db88f766dd03344ca96a06c7b60392deafdb21fa4e1b2f675a33ed7117294d74bf6395cb79157b438fca7ea53ad26d5cfdc578da59703d662079

    • SSDEEP

      12288:4W7OY3YTn155L/9hFTMq2EKMAcuCSF7aqxETMNIp0Fh6zUV:4Wf3YTnJLBv2EKMAcOgqxETMNIpM6Y

MITRE ATT&CK Enterprise v15

Tasks