General

  • Target

    d5b58d2e0b7c815277c77ff4fc59122bdb6c592f855259b551dea1c811a89526

  • Size

    425KB

  • Sample

    240831-rge8jsxdrn

  • MD5

    5c7efab0630b3b2ed2e09890ac16486b

  • SHA1

    3d6ff1f740ac8148ba4f20a124cd789ba9e283da

  • SHA256

    d5b58d2e0b7c815277c77ff4fc59122bdb6c592f855259b551dea1c811a89526

  • SHA512

    696d1b5f90cb12b0c861601084b95814d20f997fac37cbe6fe5ff439502eae4b7e1545fb2a5f8eec82299cda300b45e25623737e0d6e66b97d1a6918ba1b7407

  • SSDEEP

    6144:2g8vfP2y9VO7mwc69svp4WUaeMM0yZg52KBhihsPSFRcPgfPS7VxpNyb9Q+u:2g83P22gSwV9IsFhsPUIYPExpNki+u

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama117

Campaign

1634545803

C2

176.45.53.222:443

220.255.25.28:2222

91.178.126.51:995

2.222.167.138:443

65.100.174.110:995

105.198.236.99:995

115.96.64.9:995

196.207.140.40:995

24.231.209.2:2222

146.66.238.74:443

103.82.211.39:995

65.100.174.110:443

103.142.10.177:443

140.82.49.12:443

78.105.213.151:995

41.86.42.158:995

89.101.97.139:443

120.150.218.241:995

24.119.214.7:443

103.143.8.71:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      0def0284732d41ec83ce66364d566b6aa3d914d5e0d7c4dff68eae15df5d557b

    • Size

      689KB

    • MD5

      fce20c78174b38ef7491e97461efce9e

    • SHA1

      594a74c8197228ac25eafd058ade9ec40533aad7

    • SHA256

      0def0284732d41ec83ce66364d566b6aa3d914d5e0d7c4dff68eae15df5d557b

    • SHA512

      84a1bcfad2fbac58d733cb43945309921e89272ea47030d9e9cc9b17813279e26e0410e65296065e3f825de3a47b7486cf65e07e62dfd1ccd63cede744b83833

    • SSDEEP

      12288:BrI0bPKn8p/S0jXgfFWVkMXl2xAgwFX2ddG83tNzZ0XssC82H6/vLyWMAy:pI0bP1XWMXsAZX6JcTLdMN

MITRE ATT&CK Enterprise v15

Tasks