General

  • Target

    f656d6ccef1f3f9499e9a07e22782271_JaffaCakes118

  • Size

    506KB

  • Sample

    240925-s78s8axamd

  • MD5

    f656d6ccef1f3f9499e9a07e22782271

  • SHA1

    46d6812d888fadf561def0f65c0a59bcf4bdd8f5

  • SHA256

    59b7483e0e252b0d5d3bc65cf1e11dc47033bcddda5c02a8b63105a001a338e7

  • SHA512

    46ce130f1b3f7624a0cc8df9d9f18e6c80a5154825cb075a2a9dd6b45320e87c8c553985278984487c817bb6a8ed36e50e1aef6bc8795cb25ed61d2d36eb1769

  • SSDEEP

    12288:hW7OY3YTn155L/9hFTMq2EKMAcuCSF7aqxETMNIp0Fh6jUV:hWf3YTnJLBv2EKMAcOgqxETMNIpM6o

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama108

Campaign

1633342139

C2

206.47.134.234:2222

73.230.205.91:443

190.198.206.189:2222

103.246.130.2:20

103.246.130.122:20

81.250.153.227:2222

167.248.100.227:443

37.210.152.224:995

96.57.188.174:2078

2.99.100.134:2222

217.17.56.163:2222

217.17.56.163:2078

41.228.22.180:443

136.232.34.70:443

68.186.192.69:443

167.248.111.245:443

81.241.252.59:2078

94.200.181.154:443

96.46.103.226:443

187.116.124.82:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      f656d6ccef1f3f9499e9a07e22782271_JaffaCakes118

    • Size

      506KB

    • MD5

      f656d6ccef1f3f9499e9a07e22782271

    • SHA1

      46d6812d888fadf561def0f65c0a59bcf4bdd8f5

    • SHA256

      59b7483e0e252b0d5d3bc65cf1e11dc47033bcddda5c02a8b63105a001a338e7

    • SHA512

      46ce130f1b3f7624a0cc8df9d9f18e6c80a5154825cb075a2a9dd6b45320e87c8c553985278984487c817bb6a8ed36e50e1aef6bc8795cb25ed61d2d36eb1769

    • SSDEEP

      12288:hW7OY3YTn155L/9hFTMq2EKMAcuCSF7aqxETMNIp0Fh6jUV:hWf3YTnJLBv2EKMAcOgqxETMNIpM6o

MITRE ATT&CK Enterprise v15

Tasks